) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) getsockname$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 08:16:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 08:16:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 08:16:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 08:16:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x9, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x1, 0x8, 0x401, 0x7, 0x7, 0x5, 0x6}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x80800) 08:16:44 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) read$proc_mixer(r0, &(0x7f0000000140)=""/17, 0x11) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)=@mmap={0x2, 0xa, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x0, 0x5, 0x3, 0xfa, 0x1, "b0fb01c9"}, 0x2, 0x1, {}, 0xd0e3}) 08:16:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:16:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) socketpair(0x25, 0x2, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75b397db519d78adbe7c6b0292e216c7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a40be7c6a4211e3c62c74c6a349d0fc6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b3e1e93a7ee4a4295f6c28b88058824"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aded8a5d9c644523e59cf2d8c997475007aafcd3a8be5c9b9de430192e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c7a983a1bc5bd5cad3eaf216bb474c5c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMKID={0x14, 0x55, "0ccc29137dd6d7161d7fcae5f9e711a8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x22, 0x5, 0x9, 0x80, 0x97a, 0x7, 0xa}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x60000000, 0x1, "961f2bf87602151d6cc3f7e76a866a3620e5fb68426438f98b0c419d0e131dc1", 0x3, 0x8000000000000000, 0x7f, 0x80, 0x0, 0x80000001, 0x1f, 0xffff0c0c, [0x9, 0x2, 0x1f9b1534]}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040)={0x2, "12a274"}, 0x6) 08:16:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:16:44 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0xa, 0x44, &(0x7f0000000040)="82bda18c8d17f9b3aa196be9311278378dae09df4f8e0f85142fe4f4cdd0123fc769f645a7cece988a7ae6160bef7bdd34f1a819b470a676d9fc6286d56393f4e833d42bc8617e453e7f619037ec8140f0c5765b5e2072a3db4ce6081cd83504fc2ae5ea0e093cfa2bb9838e5c4cea6046078c438939aa8152b192d1873a27e9cb63ae10bd1b83d89358dc30912e58cfb85ebfb536f7ec9c8b36a0c48aa0903f2aa0e1ea28f707e0a7295a07de238c5eab50d54105c8676a8e43c0d7c3dce0a7b0d67b670c8a0c79039f55f94c7f78c9dbd839b971785e2402de7d40599413b8b109a1f418b4e8195c", {0x5, 0x3, 0x34324d59, 0x7, 0xcd47, 0xdb, 0x6, 0x2}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) read$proc_mixer(r0, &(0x7f0000000140)=""/17, 0x11) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000080), 0x4800) (async) read$proc_mixer(r0, &(0x7f0000000140)=""/17, 0x11) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:16:44 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0xa, 0x44, &(0x7f0000000040)="82bda18c8d17f9b3aa196be9311278378dae09df4f8e0f85142fe4f4cdd0123fc769f645a7cece988a7ae6160bef7bdd34f1a819b470a676d9fc6286d56393f4e833d42bc8617e453e7f619037ec8140f0c5765b5e2072a3db4ce6081cd83504fc2ae5ea0e093cfa2bb9838e5c4cea6046078c438939aa8152b192d1873a27e9cb63ae10bd1b83d89358dc30912e58cfb85ebfb536f7ec9c8b36a0c48aa0903f2aa0e1ea28f707e0a7295a07de238c5eab50d54105c8676a8e43c0d7c3dce0a7b0d67b670c8a0c79039f55f94c7f78c9dbd839b971785e2402de7d40599413b8b109a1f418b4e8195c", {0x5, 0x3, 0x34324d59, 0x7, 0xcd47, 0xdb, 0x6, 0x2}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) read$proc_mixer(r0, &(0x7f0000000140)=""/17, 0x11) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="06a8cf822e918023830169a4d610f14334c91283d811daa000a42e2975237f950ba0b50e779c05a2c47d48488040f5729e2394d1d31f016f943a7e0978ed4aa6e15f6a927a5bf1698add38f6bd5219e2520e43cebad00d2d08b791532fa671d77235cd5312b1e5092d3dad65d74bf932051b5be61d223d330084e0fae394bfb634a200863feacb27546d075ba90d07298b604c8862865bdd2aaf4d5fb96f6e9f38d7245214cbc9fbbb4e17c933581a0ad1b3b5f4323decb260d127b77c7b0c2cf702fe9a64bf1345222a5587ab7f19d37a6a9eac4ec9981931a2fe80e673eb71428619418236d77e8d3f9257055f39db9e127c170810feb7b37f907a67861756f8e136e5e5ff961d75e8338f1a6c23aaca8ecea8f266b7df434789137939dcf3c9d322d713b2a0c7a536f03f90f6c8c5eb31f098e58ee2abfe1aaf3a03725891bbf982547c82f60b31232fd3f1a1201d704f53c7eedd193265075d675c8dfda90e520c384632fdac5a9d200ed8172e60c3800e616a070be37afecc368e674949f5945600aed622dd86a5c804ad1449a668c3a4bcb4883e74143f15fb66140d7ce44dadc9b23c553c16646ea98acfb27e0a62681afb2af4e43b5a2b27a66a80374a793fca912bbe5b7ed4a6e3004d02d7ea4f5b8c1ca2d071705bfe340822e7a9162bf2d3b3febb68c3e685120a317e8d00af383bc8f7fc91b8d4e65fd34582fd3269c5e46397652ce6ea69792668ab9c9a68fd11196e31660bc2d8ca358926de8c9080fbf605f2f8c7223cf3b9ea84538fe3f2c51da6d8c4ee1b4356368005ce24ba5d7dac1a2c759a4df9eab5edfab7dead8729e037e16ffac04306b8dd7726c640d282586e009c34cfac34774dd1327321d6e44a20d3fd5089c7953158ac3901798e85fd70a9cf61c2474d7784d9e86c89662a1faf45b61704ae41f1f7bb2a06d3561f17a6f2c8514c36d24d80f75f8b281b6799c0695df3a7b89e50fca725b3d7b67bcbe0342122e8bf03729f9c8552a55f5cedcf5fbfe05ecf8977c004377aebd69b77e7c925df78b7a8410f4c730a62b4545a0fdce61711453f8178d1b66424024d0792f3b7e0d09e1ab7ed5054b1e85df722504ac6fe0ea1e5f43295a29f990261d12cb35491614984494e5ca0482a3dcec58f1e249bc6a32266a55bc6d9a92575fbf5246504817248b5705ba3e1a1d1668eaad2e0f42ac76170cc44f29814936c28765556582e505d72db8841b594e8c4e8104e44e4bde3256d54419a0595f8e997ebe8783440c8578cfa1d986af1117314df1ca8e910fd4ac0cf1595e2eedee3ad15ba77d947d8a0e312142b7a5a9a44fc31d857d0afb392604b2a06b197606299966cc4fb14b690b57e5c6ba5c1382182d7c4ae20ee1f4d6abce8911aa9a50d330face564a8637c9ec1666dfb1ea78a23b55cdd64f4741ebc4e8c30c0b72c6691af4bf24a86bacf0e33f6db19cd3efd78fb772e110cf7448438259bcdf1b3ee23e0abc89aa4f1a233f60a80f2fb261f03a29e24b08f9651a631f873cc3afef0cd80f7e20a21d8ad54e4325b7612e4ee6cf887dd3aebe0468e386e8e0ca68534fef4d7b9ca5ea3eeca1c69df5b9626acdb5adc611830f885e799b915d23590dfcadb08156621b09c10f2a7d07ef85b16906fb0d6937797ffd891c94252c86ebd8d4154b6f5e3fbb238bb86f3436917be1b8e85b5381d4e907d5a39db6c4cdcf3b2fdce0c277ce32be0317e9d27877cab826c94bc4dc2aae8e862b85ee4334736912ca62571673c96d244a4551b81d3c5bd78c5c4ea13ea557359eb6d40513ebf30167eae2a9bc7c29eb3ae1759db1fc527fb0c3f9a02240acbb658aab3cf4809deac1d9916d1106ae421bd77402d4da0bd829f8b26692e6962382e846bc9969d07ccc77e9c6738d761f3a403d5808f58ffa9660ef350605925259a977f7860eb815faf68add8069833de8c20766a9ea78548bad5c76b4398205fbf08795df7f7d98fae6ec361b542d4433902400f04556fe8ffa3dc0a4317416bb98179a36d570bb5d4b45806c04c6f3335aae3242ffd68602149e1bd446c7f7dae1f08d6d6403570e5dde4897bc16c069cee6f5411c5030141b2ca0aa1517f21cb84321f7113966be5c8fd161a36e306fa234ff5a75b15add490366fb2fc66e7da8744f96481da78f09f0cc2b4cd67888466c7db953af0096e4e5dde2e280dc8ba60afba3db85c94c007535093da882821fe6cebf0cbe1a35b3d88361f7b27cdb2d721e63b80af6a6804348ae5cc2ac9a529a31253ba5363aa2c731185f426ee2465ba02e720074b9cb095ad1f6f8d1c01b364be76d8e7f88ec174a51d8ad059795a112a59c28830105579b80e778f2be0b2049f7dfa9978b35ffd59b35c74cdb6063d3effd2d566ca0ac4b4b798fb74c72f935e92da4f93920fa0384c4e85dec2425169592df13f19eba785ab0e88e95c09b52e83b19b12d2fd0edc0f625a261b6e240034dba10c17a8d37aa6b24327f2497d8e360283464278409515f2c8ac494debbeb3359c6a64ca743122eab8ecdb1df05cb8800f5f2d29bc5a533128a163f0b2a4ce4837be1695cb41090e598c66e1e82c65c025f1510dcafd397c3c41860532b32282f788c9cda5c4ccf1bfcc22ce59f5abf9f9752e53181edf59251636e67ae1d184d0d211d4c73ad324a8d5067d41d9c70e1b148a36b3b9b8eb25e6c7b483adc755850492a593851001ac8ed1ba885fca174427bc37bea72270b0bdaf4b7b9a3d84c760f650c63530154f18d08c86cc96ff7c3c75be5a240eddbe960b47a8f34a133afefb40e8a7d1802d11fe39acf011de76ac14e056eb1dcc6e48f2d567ac255c404a80955fc31fe4a694285b7d2855a4c4a1aff3b21791e81dfca86cedeae542b758fb9a7f00e18526fd572d721abb1c95beb44587b89da167660ce4f4c69cedf1f43d12b2381bbf38c490d345c469d2497870e09f6d928930251099015940fc2c0ab94e24e4341c833764d5fbd90f3730cc18ff3c57c133d99a5366c8bd768671ea143a16cceb47e1aa7cfdc1101bc28e3e216eb3f563e1ed6235b6377f9224a2db1bde874793411447e434a07478a9f8e0421adbb20037cf5e65f2a1c4df7981ad2cf0c1a4744c3956e6535ece5591e7728d69614c2a5704737e8b8e6eec9d4a18ed0a6b7a949bfabf4a70051fcc310cc8c070e60531a1d9a76c0f6305b2990f86018e986563adf74efaf675e4a7bfd4f4a97eee131f93b15c9a65997dfb2b0a8fac74a869af8d5ce52c3cca7fc534d54a679cd3cb4f6663e840a896cb48ad5baea95cca33c7258ac46fc11277783800c3f24beec19a75e55333b4d37a9f0bde6121445b461fd5b1226f8d27375cc3426e83fae339d6fdc9cd854f93af0eaca294968c305e427920b5b743c2803e85e59f13d19469fe13e8449b2fa190585380a4d3ecb0bd04bc6d53441de29d40b815f3e9e5dcc1c3d0829a4d16e8c2f66f31c1ade8dfa8a4c003f12dbfe74cbdd9efaf00450ea1fd9963703c613430532663f94754a43570d32c0af1bf65567d08b1d54fa0c32466b982c173cd1dcd7451369f6e53f5f607de2faa62f46e2d1df7c1cbbec036bbd5146aa79a7590b3686f20cb4570b41f286fab82e920312f7c7767804d0799b6466e23682cd53014930033d18a4f43a44c7d786221ec99a8aabe59708e0047e8ff366d7d9ad66e38d4b9828059510f0da541090eafb1dd281e63ac8e55d35bed2e3dd25a8e5c780c79131b3e0902fbc5bffcfb20faf76a4fcba46a56da1d45cd00a9df2c99ac0a5f6e2f7a22b1c509af2936d87917e1f30b62a2ccf1857359424634e27eec457722996cc3cf420eca10dd4708e67048f0f7f9263b49c0ea40a1db7e5a5658f57d5dd22ec403e91611fae8df44df6dfe7150f2e1648468fa4a07165d3562c0283ef87a20e4cdb3d7e757657a0166f6134196766c3178b94905f52dd63c959d03b84ea79ea4eebb8065aa070f6a51faf843e64450e1ad34a7bdde772ce22a0e788f1ecdc790548ab9822d52402d6dd932f4fc46a0c9f341705575452625e47284f24b41b9455bff2765ab96f68467730fbb15f7a8ae2cfe47652ea0579ea373492fd95329f35902fd3d0b7a8b22ff9658dc3e404f5d83dadcce4a2c23e53bc991c3b3fc275213b3a5500df38b6d4feeac2483986ef36c6e9f87a4250e8a0c2eeb5c92174003ed35e0b97818f856510c137cd3e6dcda46c92647a00ea7148e3604f8fea39cbad2d6f148821bfb33129a1b75bbe3b8cdd7d57e7f100ed123df0f0f8ec9a47286387018b74ec483b07a7fa2c67eb09014ceb38f98ab28e7154e7dded53806a72edf6199f1aab630c8695484507628964da433ca2163446a7fa7b32f28970ca7492801d9dc2db2a437d3e973cf0c277f9cdff44edde8e6d402a13bf7ff684d7c3f374636665c5375d187d9e1b20f420384041b35e23abf019e1edc04c223841873f39cb3678d9e4cda87c4a579ac50baa940609bb3837a9ef44fd4c66d703f7420e8d31d801bc8a585062762396d725698e114fb8d5043610807265ce4f83c1aee4cbe7dad2de52e1d3abd0c137af6c3ce59c191cee7b5eb52e4ad8520f6e7021ae449c4ec079d09c70e85a154c4a20ef394ef1cbf482bfa27cdbea57be4ea5edb7e9dde2ea946e74a3bc0021bf16c70640bacca5afe82a6019dbff7c55feb735f56dc7da076f230ce86976dd6cf5e42f1efc9a13acd281087205fd1e223a4ec9a37bb44c40a42884aeda5247f1b79712cb1234ce1f28be806f8fc286c4a2c0b4c50b6dca64363e83bf9b57d8d76d57ff5f9814c2c9433900b6e8a913059aee7f13f8581e0ea4a2a52981720ea077466c5a89a5992deba8076e80054c44673e10f34f9e2c805c4a80ccd81c8c3b310086761592893c641ed89f88b1aae7a26b7b1970879a62347c7c97b17e172dca1ea46ed9323ac4e8483d29083ece567a4e91dd156fe9d4873d8eae83d89c360454485f5c0180f192a8344919f485451ebf521a63a4029b2d4994a167ae2281352ddca4a1e248353b8d1f378261c953232705e9aec654272f6d9f70eb13ccaab3cc6ba297d231eae1d07be048a8f6c7a6c1914c8e1122355c85c22223cd58dc6db72c46fb63b54d2db666859fc34ee248effaa9dc9da9aa5753c62869ac3a61cda40d9ffdf4f88ce2a7936b8d78bb5931d045f569372f7e2c5fbfa5ff3da0758effc8b2409a7e42555c9d106c740b8f6afbd8fc78277874482f254605ccf60ebc510c00482d7caafdac74948c58131102f5040ad98c085e63b137462d93d2af07eaabccdcdebb46624e5e6a67fda05f7f415dee3a0fab14a9a5e0b9736fc9836224d2a7d6c0a8217e76727beafabfa03d5652d59134033d7beb0896cf3d8b6c6a784d635a1c8916c14dca171725eda652e402989c7cc526881d50bb1853a978cf601c91f2bba4df75d48bea593d132b1ad56aa04ed6a2bbcb7e51544a5de530f885fae04e4a05b4f50f02ae1c7b7b97724b7f0614ee4e49bba26a1295b17255a94f20b566723d91d4c77d9217d602291903a97b57d7fc57bfef9ffcd26ae5b13d50ff428f7ce4020f34d1c5931d6fdac458a334769ceb127ae9fb7762a475b3168db6eb2136369132c88ea5188c8198df7126077e1281a2e9715c0fec552f80790254ac1fac554b8764782fff40996d8d86fea414eaed5fe90777dfec76ae1795dbabd793d32d86ccb11470bebfa430c173182245f351047bff335a987725e0b0b3cc78681a60775c548a81486a2", 0x1000, 0x80e0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0xa, 0x44, &(0x7f0000000040)="82bda18c8d17f9b3aa196be9311278378dae09df4f8e0f85142fe4f4cdd0123fc769f645a7cece988a7ae6160bef7bdd34f1a819b470a676d9fc6286d56393f4e833d42bc8617e453e7f619037ec8140f0c5765b5e2072a3db4ce6081cd83504fc2ae5ea0e093cfa2bb9838e5c4cea6046078c438939aa8152b192d1873a27e9cb63ae10bd1b83d89358dc30912e58cfb85ebfb536f7ec9c8b36a0c48aa0903f2aa0e1ea28f707e0a7295a07de238c5eab50d54105c8676a8e43c0d7c3dce0a7b0d67b670c8a0c79039f55f94c7f78c9dbd839b971785e2402de7d40599413b8b109a1f418b4e8195c", {0x5, 0x3, 0x34324d59, 0x7, 0xcd47, 0xdb, 0x6, 0x2}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:44 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0xa, 0x44, &(0x7f0000000040)="82bda18c8d17f9b3aa196be9311278378dae09df4f8e0f85142fe4f4cdd0123fc769f645a7cece988a7ae6160bef7bdd34f1a819b470a676d9fc6286d56393f4e833d42bc8617e453e7f619037ec8140f0c5765b5e2072a3db4ce6081cd83504fc2ae5ea0e093cfa2bb9838e5c4cea6046078c438939aa8152b192d1873a27e9cb63ae10bd1b83d89358dc30912e58cfb85ebfb536f7ec9c8b36a0c48aa0903f2aa0e1ea28f707e0a7295a07de238c5eab50d54105c8676a8e43c0d7c3dce0a7b0d67b670c8a0c79039f55f94c7f78c9dbd839b971785e2402de7d40599413b8b109a1f418b4e8195c", {0x5, 0x3, 0x34324d59, 0x7, 0xcd47, 0xdb, 0x6, 0x2}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:44 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)=@mmap={0x2, 0xa, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x0, 0x5, 0x3, 0xfa, 0x1, "b0fb01c9"}, 0x2, 0x1, {}, 0xd0e3}) 08:16:45 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:45 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:16:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:16:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000340)={0x8000000000000001, 0x8, 0x4e07, 0x1, 0x8, 0x517f}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0xb6ba003f3fd94eae) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x8001, 0x4, 0x47c, 0x7, 0x4, 0xff}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0x2) socketpair(0x10, 0xa, 0x20, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0), 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x1}, 0x10) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x2000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) ioctl$RTC_WIE_ON(r2, 0x700f) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000300)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) 08:16:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) socketpair(0x25, 0x2, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75b397db519d78adbe7c6b0292e216c7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a40be7c6a4211e3c62c74c6a349d0fc6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b3e1e93a7ee4a4295f6c28b88058824"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aded8a5d9c644523e59cf2d8c997475007aafcd3a8be5c9b9de430192e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c7a983a1bc5bd5cad3eaf216bb474c5c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMKID={0x14, 0x55, "0ccc29137dd6d7161d7fcae5f9e711a8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x22, 0x5, 0x9, 0x80, 0x97a, 0x7, 0xa}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x60000000, 0x1, "961f2bf87602151d6cc3f7e76a866a3620e5fb68426438f98b0c419d0e131dc1", 0x3, 0x8000000000000000, 0x7f, 0x80, 0x0, 0x80000001, 0x1f, 0xffff0c0c, [0x9, 0x2, 0x1f9b1534]}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040)={0x2, "12a274"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) socketpair(0x25, 0x2, 0xfffffeff, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75b397db519d78adbe7c6b0292e216c7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a40be7c6a4211e3c62c74c6a349d0fc6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b3e1e93a7ee4a4295f6c28b88058824"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aded8a5d9c644523e59cf2d8c997475007aafcd3a8be5c9b9de430192e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c7a983a1bc5bd5cad3eaf216bb474c5c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMKID={0x14, 0x55, "0ccc29137dd6d7161d7fcae5f9e711a8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x22, 0x5, 0x9, 0x80, 0x97a, 0x7, 0xa}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x60000000, 0x1, "961f2bf87602151d6cc3f7e76a866a3620e5fb68426438f98b0c419d0e131dc1", 0x3, 0x8000000000000000, 0x7f, 0x80, 0x0, 0x80000001, 0x1f, 0xffff0c0c, [0x9, 0x2, 0x1f9b1534]}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040)={0x2, "12a274"}, 0x6) (async) 08:16:45 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000340)={0x8000000000000001, 0x8, 0x4e07, 0x1, 0x8, 0x517f}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0xb6ba003f3fd94eae) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x8001, 0x4, 0x47c, 0x7, 0x4, 0xff}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0x2) socketpair(0x10, 0xa, 0x20, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0), 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x1}, 0x10) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x2000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) ioctl$RTC_WIE_ON(r2, 0x700f) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000300)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000340)={0x8000000000000001, 0x8, 0x4e07, 0x1, 0x8, 0x517f}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0xb6ba003f3fd94eae) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x8001, 0x4, 0x47c, 0x7, 0x4, 0xff}, 0xc) (async) pipe2(&(0x7f0000000040), 0x80) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) (async) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0x2) (async) socketpair(0x10, 0xa, 0x20, &(0x7f0000000240)) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0), 0x2) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x1}, 0x10) (async) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x2000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) (async) ioctl$RTC_WIE_ON(r2, 0x700f) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000300)={r6}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) (async) 08:16:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) 08:16:45 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) (async) 08:16:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) socketpair(0x25, 0x2, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75b397db519d78adbe7c6b0292e216c7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a40be7c6a4211e3c62c74c6a349d0fc6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b3e1e93a7ee4a4295f6c28b88058824"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aded8a5d9c644523e59cf2d8c997475007aafcd3a8be5c9b9de430192e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c7a983a1bc5bd5cad3eaf216bb474c5c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMKID={0x14, 0x55, "0ccc29137dd6d7161d7fcae5f9e711a8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async, rerun: 32) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x22, 0x5, 0x9, 0x80, 0x97a, 0x7, 0xa}) (rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x60000000, 0x1, "961f2bf87602151d6cc3f7e76a866a3620e5fb68426438f98b0c419d0e131dc1", 0x3, 0x8000000000000000, 0x7f, 0x80, 0x0, 0x80000001, 0x1f, 0xffff0c0c, [0x9, 0x2, 0x1f9b1534]}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040)={0x2, "12a274"}, 0x6) 08:16:45 executing program 2: sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="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", 0x1000, 0x80e0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000340)={0x8000000000000001, 0x8, 0x4e07, 0x1, 0x8, 0x517f}) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async, rerun: 32) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0xb6ba003f3fd94eae) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x8001, 0x4, 0x47c, 0x7, 0x4, 0xff}, 0xc) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0x2) socketpair(0x10, 0xa, 0x20, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0), 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x1}, 0x10) (async) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x2000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) (async, rerun: 32) ioctl$RTC_WIE_ON(r2, 0x700f) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000300)={r6}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) 08:16:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 32) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) (rerun: 32) 08:16:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000340)={0x8000000000000001, 0x8, 0x4e07, 0x1, 0x8, 0x517f}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0xb6ba003f3fd94eae) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0x8001, 0x4, 0x47c, 0x7, 0x4, 0xff}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0x2) socketpair(0x10, 0xa, 0x20, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0), 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x1}, 0x10) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x2000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) ioctl$RTC_WIE_ON(r2, 0x700f) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000300)={r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) 08:16:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:16:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0x9, 0x8}) 08:16:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:46 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000100)={0x7, "e96af21ea6b6767acb4e88f89d8c20de79562b763e4c37781bff80b1d82bfd74", 0x800, 0x600000, 0x5, 0x2, 0x5}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x12, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x7be}, 0xe) 08:16:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) socketpair(0x25, 0x2, 0xfffffeff, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3ff, 0x31}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "75b397db519d78adbe7c6b0292e216c7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a40be7c6a4211e3c62c74c6a349d0fc6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9b3e1e93a7ee4a4295f6c28b88058824"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aded8a5d9c644523e59cf2d8c997475007aafcd3a8be5c9b9de430192e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c7a983a1bc5bd5cad3eaf216bb474c5c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMKID={0x14, 0x55, "0ccc29137dd6d7161d7fcae5f9e711a8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x22, 0x5, 0x9, 0x80, 0x97a, 0x7, 0xa}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x60000000, 0x1, "961f2bf87602151d6cc3f7e76a866a3620e5fb68426438f98b0c419d0e131dc1", 0x3, 0x8000000000000000, 0x7f, 0x80, 0x0, 0x80000001, 0x1f, 0xffff0c0c, [0x9, 0x2, 0x1f9b1534]}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040)={0x2, "12a274"}, 0x6) 08:16:46 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) 08:16:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:46 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44f00f050d5ef29dc396e692c35915f6055c830f0771e972c6d490e5d5c41651ac631bc1739a0fcb4bd9f080851cd0a607afa0e34cbcfedcab0d3f27c8a1c2", @ANYRES16, @ANYBLOB="010000000000000000005700000008000300664a70b4a209b9ced60f2c1f93abbce9fde1ecf9ed0c58da51a3708012257b9578dae1bc4c676fee06220a2fcedf270f74a614e5f9a49df070d8e7abf5628990760c8cdf30de79e6d8af60e68dba49c4c35c13c9fb9562b0ade8ef25096da4ecdfeaa1ecae869eb54ccc54af65f8eb055a056f99d2475a759237cc46c7b9609a24a9dcc4011fe934702cb3263ff2e2a6a10accea2ffb8ea7610890602854864e69330d48bfe10c7fad8334bef71b0316a9e046edd076fe892adc981b41f1e49ae8", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff9fa4, 0x21}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x53}, @NL80211_ATTR_PMKID={0x14, 0x55, "159fd553ded42590bf8c4312c255359b"}]}, 0x3c}}, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88d7338bbf9f7c60}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd70777ede1f4c7ad393ec95327856f8760000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0800a10003000000050019010f0000000800a000ff070000050019010600000005001901060000000800270003000000080027000200000004000801"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x28ee, 0x7f, 0x80000001, 0x44ca, 0x3, 0x5, 0x2857}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000300)={0x7, @raw_data="477b9aa43111e3f4c5c9743af7646d34144d4780ef82883f35e39f99dd35704d338916ec18e82b6627c763f0f67b6f09d3072d464eaaa134ccf2c480ca1ba520059d03233e1024ca41063ba0fdd40ffbd40756b881f75b546b1b2addc2593e68dc35ef085f4d49c4174572a551b02cf0c5eef83fe36b1e539ab0b8358c9525c5cab0f8bc167c2752cf72f4ea99cb55334008e7377bc8c4491838e1196d7f8c6407a12791f18d93e9c2600ffe9d1bb8039219f34d6390f2eb4a1b8f0de786d4a8f55c6d4dc564620e"}) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000100)={0x7, "e96af21ea6b6767acb4e88f89d8c20de79562b763e4c37781bff80b1d82bfd74", 0x800, 0x600000, 0x5, 0x2, 0x5}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x12, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x7be}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) (async) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000100)={0x7, "e96af21ea6b6767acb4e88f89d8c20de79562b763e4c37781bff80b1d82bfd74", 0x800, 0x600000, 0x5, 0x2, 0x5}) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x12, 0x4) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x7be}, 0xe) (async) 08:16:46 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) 08:16:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0x9, 0x8}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0x9, 0x8}) (async) 08:16:47 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x1f}, 0x2) 08:16:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000100)={0x7, "e96af21ea6b6767acb4e88f89d8c20de79562b763e4c37781bff80b1d82bfd74", 0x800, 0x600000, 0x5, 0x2, 0x5}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x12, 0x4) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x2, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x7be}, 0xe) 08:16:47 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:47 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x6, @any, 0x2, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x6, 0x40, 0x6, 0x9, 0x52, 0x3}, 0xc) 08:16:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x1f}, 0x2) 08:16:47 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:47 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44f00f050d5ef29dc396e692c35915f6055c830f0771e972c6d490e5d5c41651ac631bc1739a0fcb4bd9f080851cd0a607afa0e34cbcfedcab0d3f27c8a1c2", @ANYRES16, @ANYBLOB="010000000000000000005700000008000300664a70b4a209b9ced60f2c1f93abbce9fde1ecf9ed0c58da51a3708012257b9578dae1bc4c676fee06220a2fcedf270f74a614e5f9a49df070d8e7abf5628990760c8cdf30de79e6d8af60e68dba49c4c35c13c9fb9562b0ade8ef25096da4ecdfeaa1ecae869eb54ccc54af65f8eb055a056f99d2475a759237cc46c7b9609a24a9dcc4011fe934702cb3263ff2e2a6a10accea2ffb8ea7610890602854864e69330d48bfe10c7fad8334bef71b0316a9e046edd076fe892adc981b41f1e49ae8", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff9fa4, 0x21}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x53}, @NL80211_ATTR_PMKID={0x14, 0x55, "159fd553ded42590bf8c4312c255359b"}]}, 0x3c}}, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88d7338bbf9f7c60}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd70777ede1f4c7ad393ec95327856f8760000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0800a10003000000050019010f0000000800a000ff070000050019010600000005001901060000000800270003000000080027000200000004000801"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x28ee, 0x7f, 0x80000001, 0x44ca, 0x3, 0x5, 0x2857}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000300)={0x7, @raw_data="477b9aa43111e3f4c5c9743af7646d34144d4780ef82883f35e39f99dd35704d338916ec18e82b6627c763f0f67b6f09d3072d464eaaa134ccf2c480ca1ba520059d03233e1024ca41063ba0fdd40ffbd40756b881f75b546b1b2addc2593e68dc35ef085f4d49c4174572a551b02cf0c5eef83fe36b1e539ab0b8358c9525c5cab0f8bc167c2752cf72f4ea99cb55334008e7377bc8c4491838e1196d7f8c6407a12791f18d93e9c2600ffe9d1bb8039219f34d6390f2eb4a1b8f0de786d4a8f55c6d4dc564620e"}) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x1f}, 0x2) 08:16:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async, rerun: 64) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x100, 0x9, 0x8}) (rerun: 64) 08:16:48 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25350000000c009900ffffffff6e00000008001f01c64a841305002001480000000a0034000101010101000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240c8045) 08:16:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25350000000c009900ffffffff6e00000008001f01c64a841305002001480000000a0034000101010101000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240c8045) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25350000000c009900ffffffff6e00000008001f01c64a841305002001480000000a0034000101010101000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240c8045) (async) 08:16:48 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x6, @any, 0x2, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x6, 0x40, 0x6, 0x9, 0x52, 0x3}, 0xc) 08:16:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25350000000c009900ffffffff6e00000008001f01c64a841305002001480000000a0034000101010101000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240c8045) 08:16:48 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000540)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44f00f050d5ef29dc396e692c35915f6055c830f0771e972c6d490e5d5c41651ac631bc1739a0fcb4bd9f080851cd0a607afa0e34cbcfedcab0d3f27c8a1c2", @ANYRES16, @ANYBLOB="010000000000000000005700000008000300664a70b4a209b9ced60f2c1f93abbce9fde1ecf9ed0c58da51a3708012257b9578dae1bc4c676fee06220a2fcedf270f74a614e5f9a49df070d8e7abf5628990760c8cdf30de79e6d8af60e68dba49c4c35c13c9fb9562b0ade8ef25096da4ecdfeaa1ecae869eb54ccc54af65f8eb055a056f99d2475a759237cc46c7b9609a24a9dcc4011fe934702cb3263ff2e2a6a10accea2ffb8ea7610890602854864e69330d48bfe10c7fad8334bef71b0316a9e046edd076fe892adc981b41f1e49ae8", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff9fa4, 0x21}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x53}, @NL80211_ATTR_PMKID={0x14, 0x55, "159fd553ded42590bf8c4312c255359b"}]}, 0x3c}}, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88d7338bbf9f7c60}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd70777ede1f4c7ad393ec95327856f8760000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0800a10003000000050019010f0000000800a000ff070000050019010600000005001901060000000800270003000000080027000200000004000801"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x28ee, 0x7f, 0x80000001, 0x44ca, 0x3, 0x5, 0x2857}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000300)={0x7, @raw_data="477b9aa43111e3f4c5c9743af7646d34144d4780ef82883f35e39f99dd35704d338916ec18e82b6627c763f0f67b6f09d3072d464eaaa134ccf2c480ca1ba520059d03233e1024ca41063ba0fdd40ffbd40756b881f75b546b1b2addc2593e68dc35ef085f4d49c4174572a551b02cf0c5eef83fe36b1e539ab0b8358c9525c5cab0f8bc167c2752cf72f4ea99cb55334008e7377bc8c4491838e1196d7f8c6407a12791f18d93e9c2600ffe9d1bb8039219f34d6390f2eb4a1b8f0de786d4a8f55c6d4dc564620e"}) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:48 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) 08:16:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x650c, 0x1}, 0xfffffc8c) 08:16:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000280)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x8}, 0xe) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x100, "d4afbc9f23e27f753bbdb675963d4bf03b69eeacb0ea8694783289f8c0e05496", 0x8, 0x7, 0x3d, 0x7, 0x80000001, 0x1, 0x7f, 0x8, [0x2, 0x8, 0xe9, 0x3f]}) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0xd3, 0xa9880b11a5643ef, &(0x7f0000000080), {0x3, 0x1, 0x34324d59, 0x1, 0x10000001, 0x797, 0x8, 0xa26}}) 08:16:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none}, 0xe) 08:16:48 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) 08:16:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x650c, 0x1}, 0xfffffc8c) 08:16:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none}, 0xe) (async) 08:16:48 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) 08:16:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x6, @any, 0x2, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x6, 0x40, 0x6, 0x9, 0x52, 0x3}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) (async) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x6, @any, 0x2, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x6, 0x40, 0x6, 0x9, 0x52, 0x3}, 0xc) (async) 08:16:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xfffffc8c) 08:16:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none}, 0xe) 08:16:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ff, @none, 0x1248, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1}, 0xe) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xffff, @none, 0x4}, 0xe) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x9, "3296c960d39b1c00", 0x800, 0x2, 0xfff, 0x0, 0x4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x80000000, "abc8787a7b885102c3b483ca62ffbd4ac986e42fd80694775e02f218ecb81524"}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0x10000, 0x6, 0x4000}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$proc_mixer(r5, &(0x7f0000000380)=""/6, 0x6) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xccd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000080)) 08:16:49 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed}, 0xfffffc8c) 08:16:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000280)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x8}, 0xe) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x100, "d4afbc9f23e27f753bbdb675963d4bf03b69eeacb0ea8694783289f8c0e05496", 0x8, 0x7, 0x3d, 0x7, 0x80000001, 0x1, 0x7f, 0x8, [0x2, 0x8, 0xe9, 0x3f]}) (async) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0xd3, 0xa9880b11a5643ef, &(0x7f0000000080), {0x3, 0x1, 0x34324d59, 0x1, 0x10000001, 0x797, 0x8, 0xa26}}) 08:16:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x1, 0x7, 0x7fff, 0x81, 0xff, 0x3, 0x8000}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) 08:16:49 executing program 2: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x800, 0x100, 0x9, 0x94, 0x8, 0x4c, 0x1000}, 0xc) r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x0, "28ab1d"}, 0x6) 08:16:49 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) 08:16:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x6, @any, 0x2, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x6, 0x40, 0x6, 0x9, 0x52, 0x3}, 0xc) 08:16:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x1, 0x7, 0x7fff, 0x81, 0xff, 0x3, 0x8000}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:49 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ff, @none, 0x1248, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1}, 0xe) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xffff, @none, 0x4}, 0xe) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x9, "3296c960d39b1c00", 0x800, 0x2, 0xfff, 0x0, 0x4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x80000000, "abc8787a7b885102c3b483ca62ffbd4ac986e42fd80694775e02f218ecb81524"}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0x10000, 0x6, 0x4000}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$proc_mixer(r5, &(0x7f0000000380)=""/6, 0x6) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xccd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ff, @none, 0x1248, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1}, 0xe) (async) pipe2(&(0x7f0000000240), 0x4000) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xffff, @none, 0x4}, 0xe) (async) pipe2(&(0x7f0000000300), 0x84000) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x9, "3296c960d39b1c00", 0x800, 0x2, 0xfff, 0x0, 0x4}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x80000000, "abc8787a7b885102c3b483ca62ffbd4ac986e42fd80694775e02f218ecb81524"}) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0x10000, 0x6, 0x4000}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000100), 0x0) (async) read$proc_mixer(r5, &(0x7f0000000380)=""/6, 0x6) (async) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xccd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000080)) (async) 08:16:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000280)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x8}, 0xe) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x100, "d4afbc9f23e27f753bbdb675963d4bf03b69eeacb0ea8694783289f8c0e05496", 0x8, 0x7, 0x3d, 0x7, 0x80000001, 0x1, 0x7f, 0x8, [0x2, 0x8, 0xe9, 0x3f]}) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0xd3, 0xa9880b11a5643ef, &(0x7f0000000080), {0x3, 0x1, 0x34324d59, 0x1, 0x10000001, 0x797, 0x8, 0xa26}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x20000) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000280)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x8}, 0xe) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x100, "d4afbc9f23e27f753bbdb675963d4bf03b69eeacb0ea8694783289f8c0e05496", 0x8, 0x7, 0x3d, 0x7, 0x80000001, 0x1, 0x7f, 0x8, [0x2, 0x8, 0xe9, 0x3f]}) (async) ioctl$RTC_PIE_ON(r3, 0x7005) (async) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0xd3, 0xa9880b11a5643ef, &(0x7f0000000080), {0x3, 0x1, 0x34324d59, 0x1, 0x10000001, 0x797, 0x8, 0xa26}}) (async) 08:16:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) 08:16:50 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x1, 0x7, 0x7fff, 0x81, 0xff, 0x3, 0x8000}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8001, @none, 0xfbe}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x5, 0x1000, 0x2}) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) 08:16:50 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) 08:16:50 executing program 1: pipe2(&(0x7f0000000400), 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) 08:16:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000040), 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xe) 08:16:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8001, @none, 0xfbe}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x5, 0x1000, 0x2}) 08:16:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ff, @none, 0x1248, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f, 0x1}, 0xe) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xffff, @none, 0x4}, 0xe) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x9, "3296c960d39b1c00", 0x800, 0x2, 0xfff, 0x0, 0x4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x80000000, "abc8787a7b885102c3b483ca62ffbd4ac986e42fd80694775e02f218ecb81524"}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0x10000, 0x6, 0x4000}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) read$proc_mixer(r5, &(0x7f0000000380)=""/6, 0x6) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xccd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000080)) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) (async) 08:16:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8001, @none, 0xfbe}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x5, 0x1000, 0x2}) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x40800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x400, @any, 0x1, 0xba263214f09feb51}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) 08:16:50 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x100, "aa262617b494c140020e122ef762ece6fa30203da7b74a2cadbded6ca3b44af2", 0x8000, 0x4, 0x9, 0xda2, 0x40, 0x3, 0xae6b, 0x3, [0x20, 0x72c, 0x6, 0x5]}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@fd={0x10000, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x2, 0x5, 0xe1, 0x80, 0x5a, "82675d26"}, 0x4, 0x4, {}, 0xfffffffa}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000340)={0x6, 0xc000c, "18378d10d28fe349685bdf6ed8c6771a2814ab6b61c30ff9", {0x15192c1f, 0xd6}, 0x4}) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) getpeername$unix(r6, &(0x7f0000000440), &(0x7f00000003c0)=0x6e) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x100, "3dadb884c4d01d5dc1af72fbeff800ff4980040000003dbd2761e81400", 0x2, 0x2e42, 0x1, 0xff, 0x10620, 0x8}) 08:16:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x40800) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (rerun: 64) 08:16:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x1, 0x7, 0x7fff, 0x81, 0xff, 0x3, 0x8000}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000040), 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xe) 08:16:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x40800) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) 08:16:51 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44f00f050d5ef29dc396e692c35915f6055c830f0771e972c6d490e5d5c41651ac631bc1739a0fcb4bd9f080851cd0a607afa0e34cbcfedcab0d3f27c8a1c2", @ANYRES16, @ANYBLOB="010000000000000000005700000008000300664a70b4a209b9ced60f2c1f93abbce9fde1ecf9ed0c58da51a3708012257b9578dae1bc4c676fee06220a2fcedf270f74a614e5f9a49df070d8e7abf5628990760c8cdf30de79e6d8af60e68dba49c4c35c13c9fb9562b0ade8ef25096da4ecdfeaa1ecae869eb54ccc54af65f8eb055a056f99d2475a759237cc46c7b9609a24a9dcc4011fe934702cb3263ff2e2a6a10accea2ffb8ea7610890602854864e69330d48bfe10c7fad8334bef71b0316a9e046edd076fe892adc981b41f1e49ae8", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff9fa4, 0x21}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x53}, @NL80211_ATTR_PMKID={0x14, 0x55, "159fd553ded42590bf8c4312c255359b"}]}, 0x3c}}, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88d7338bbf9f7c60}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd70777ede1f4c7ad393ec95327856f8760000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0800a10003000000050019010f0000000800a000ff070000050019010600000005001901060000000800270003000000080027000200000004000801"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x28ee, 0x7f, 0x80000001, 0x44ca, 0x3, 0x5, 0x2857}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000300)={0x7, @raw_data="477b9aa43111e3f4c5c9743af7646d34144d4780ef82883f35e39f99dd35704d338916ec18e82b6627c763f0f67b6f09d3072d464eaaa134ccf2c480ca1ba520059d03233e1024ca41063ba0fdd40ffbd40756b881f75b546b1b2addc2593e68dc35ef085f4d49c4174572a551b02cf0c5eef83fe36b1e539ab0b8358c9525c5cab0f8bc167c2752cf72f4ea99cb55334008e7377bc8c4491838e1196d7f8c6407a12791f18d93e9c2600ffe9d1bb8039219f34d6390f2eb4a1b8f0de786d4a8f55c6d4dc564620e"}) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xa055, @none, 0x4}, 0xe) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2775, @none, 0x20, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:16:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x100, "aa262617b494c140020e122ef762ece6fa30203da7b74a2cadbded6ca3b44af2", 0x8000, 0x4, 0x9, 0xda2, 0x40, 0x3, 0xae6b, 0x3, [0x20, 0x72c, 0x6, 0x5]}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@fd={0x10000, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x2, 0x5, 0xe1, 0x80, 0x5a, "82675d26"}, 0x4, 0x4, {}, 0xfffffffa}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000340)={0x6, 0xc000c, "18378d10d28fe349685bdf6ed8c6771a2814ab6b61c30ff9", {0x15192c1f, 0xd6}, 0x4}) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) getpeername$unix(r6, &(0x7f0000000440), &(0x7f00000003c0)=0x6e) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x100, "3dadb884c4d01d5dc1af72fbeff800ff4980040000003dbd2761e81400", 0x2, 0x2e42, 0x1, 0xff, 0x10620, 0x8}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x100, "aa262617b494c140020e122ef762ece6fa30203da7b74a2cadbded6ca3b44af2", 0x8000, 0x4, 0x9, 0xda2, 0x40, 0x3, 0xae6b, 0x3, [0x20, 0x72c, 0x6, 0x5]}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@fd={0x10000, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x2, 0x5, 0xe1, 0x80, 0x5a, "82675d26"}, 0x4, 0x4, {}, 0xfffffffa}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000180)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000340)={0x6, 0xc000c, "18378d10d28fe349685bdf6ed8c6771a2814ab6b61c30ff9", {0x15192c1f, 0xd6}, 0x4}) (async) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) getpeername$unix(r6, &(0x7f0000000440), &(0x7f00000003c0)=0x6e) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x100, "3dadb884c4d01d5dc1af72fbeff800ff4980040000003dbd2761e81400", 0x2, 0x2e42, 0x1, 0xff, 0x10620, 0x8}) (async) 08:16:51 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000040), 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000040), 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xe) (async) 08:16:52 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x100, "aa262617b494c140020e122ef762ece6fa30203da7b74a2cadbded6ca3b44af2", 0x8000, 0x4, 0x9, 0xda2, 0x40, 0x3, 0xae6b, 0x3, [0x20, 0x72c, 0x6, 0x5]}) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@fd={0x10000, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x2, 0x5, 0xe1, 0x80, 0x5a, "82675d26"}, 0x4, 0x4, {}, 0xfffffffa}) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000180)) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000340)={0x6, 0xc000c, "18378d10d28fe349685bdf6ed8c6771a2814ab6b61c30ff9", {0x15192c1f, 0xd6}, 0x4}) (async) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) getpeername$unix(r6, &(0x7f0000000440), &(0x7f00000003c0)=0x6e) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000001c0)={0x100, "3dadb884c4d01d5dc1af72fbeff800ff4980040000003dbd2761e81400", 0x2, 0x2e42, 0x1, 0xff, 0x10620, 0x8}) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0xf693a810d9d5449d}, 0xe) 08:16:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xa055, @none, 0x4}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2775, @none, 0x20, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:16:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xa055, @none, 0x4}, 0xe) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2775, @none, 0x20, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:16:52 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) 08:16:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000240)={0x6, "b799b4"}, 0x6) socketpair(0x23, 0x1, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x2, @any, 0xf68b, 0x2}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f00000002c0)={0x1, "920229"}, 0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000380), &(0x7f0000000300)=0xc) bind$bt_l2cap(r4, &(0x7f0000000340)={0x1f, 0x761d, @any, 0x3}, 0xe) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0xa42, 0x3, 0x297f, 0x0, 0x3, 0x9}, &(0x7f00000000c0)={0x6, 0x7, 0x6, 0xfffffffffffffff8, 0x2, 0x80000001, 0x3, 0x20000}, &(0x7f0000000100)={0x9, 0x6, 0x8, 0x4, 0x8001, 0x149e3bcc, 0xfffffffffffffff9, 0x8000000000000001}, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xffffffff]}, 0x8}) 08:16:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) 08:16:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:16:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) (async) 08:16:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) (async) 08:16:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xa055, @none, 0x4}, 0xe) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2775, @none, 0x20, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xa055, @none, 0x4}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2775, @none, 0x20, 0x1}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) 08:16:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000180)) 08:16:53 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:16:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4e9080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0xa172d275913ebd6e, 0x0) 08:16:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) 08:16:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x25c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x104, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x5, 0x2b}}, @ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x80, @val={0x0, 0x10, @random="f749b0c858d6bb0883b4cd396f8b66de"}, @void, @void, @val={0x4, 0x6, {0x7, 0xe1, 0xc5c6, 0x6}}, @void, @val={0x5, 0x6c, {0x2, 0xfe, 0x4a, "4a8d6a2f384ef230214f465f579c4c1be06b99af59a9cfeed0f00d63519ffc70f4f7693d9e122f6656232813f5c53d5ec961c1f4d7a98ad3f71570550420da8a5a96b18fc5814605915856ab3ff6bbf501a9963286fdbac8267581eb33283f1328252f59c0bdfe92f1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1f, 0xaf, 0x20}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x2, 0x7f, 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xff, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2c, 0x80, 0x1d, 0x1}}, [{0xdd, 0x1c, "f12329ab3ce382ab5beb807bc60a1de5a1c202ac7b14c89acad8448b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@cf={0x4, 0x6, {0x2, 0x7f, 0xe27, 0x8f}}, @dsss={0x3, 0x1, 0x74}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@peer_mgmt={0x75, 0x6, {0x1, 0x0, @void, @val=0x14, @void}}, @mesh_chsw={0x76, 0x6, {0x6, 0xff, 0x19}}, @rann={0x7e, 0x15, {{0x0, 0x66}, 0x7f, 0x6, @device_b, 0xfffffff9, 0x1, 0x82}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe4, 0x7f, [@chsw_timing={0x68, 0x4, {0x8001, 0x2}}, @perr={0x84, 0xaf, {0x3f, 0xb, [@not_ext={{}, @device_b, 0x3, "", 0x1e}, @ext={{}, @device_a, 0x8001, @broadcast, 0x10}, @ext={{}, @device_b, 0x0, @device_b, 0x12}, @not_ext={{}, @broadcast, 0x1, "", 0x4}, @ext={{}, @device_b, 0x3, @device_b, 0x2f}, @not_ext={{}, @device_a, 0xfff, "", 0xd}, @ext={{}, @broadcast, 0x9, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x80000000, "", 0x7}, @not_ext={{}, @broadcast, 0x4, "", 0x1e}, @not_ext={{}, @device_a, 0x79bce3da, "", 0x33}, @ext={{}, @device_a, 0x7ff8, @device_a, 0x10}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x63de, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x42, 0xf6ca}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x35, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7ff, @val=0x7f, @val=0x1f, @void}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @none, 0x1, 0x2}, 0xe) 08:16:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x2, 0x4) 08:16:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x25c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x104, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x5, 0x2b}}, @ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x80, @val={0x0, 0x10, @random="f749b0c858d6bb0883b4cd396f8b66de"}, @void, @void, @val={0x4, 0x6, {0x7, 0xe1, 0xc5c6, 0x6}}, @void, @val={0x5, 0x6c, {0x2, 0xfe, 0x4a, "4a8d6a2f384ef230214f465f579c4c1be06b99af59a9cfeed0f00d63519ffc70f4f7693d9e122f6656232813f5c53d5ec961c1f4d7a98ad3f71570550420da8a5a96b18fc5814605915856ab3ff6bbf501a9963286fdbac8267581eb33283f1328252f59c0bdfe92f1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1f, 0xaf, 0x20}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x2, 0x7f, 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xff, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2c, 0x80, 0x1d, 0x1}}, [{0xdd, 0x1c, "f12329ab3ce382ab5beb807bc60a1de5a1c202ac7b14c89acad8448b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@cf={0x4, 0x6, {0x2, 0x7f, 0xe27, 0x8f}}, @dsss={0x3, 0x1, 0x74}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@peer_mgmt={0x75, 0x6, {0x1, 0x0, @void, @val=0x14, @void}}, @mesh_chsw={0x76, 0x6, {0x6, 0xff, 0x19}}, @rann={0x7e, 0x15, {{0x0, 0x66}, 0x7f, 0x6, @device_b, 0xfffffff9, 0x1, 0x82}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe4, 0x7f, [@chsw_timing={0x68, 0x4, {0x8001, 0x2}}, @perr={0x84, 0xaf, {0x3f, 0xb, [@not_ext={{}, @device_b, 0x3, "", 0x1e}, @ext={{}, @device_a, 0x8001, @broadcast, 0x10}, @ext={{}, @device_b, 0x0, @device_b, 0x12}, @not_ext={{}, @broadcast, 0x1, "", 0x4}, @ext={{}, @device_b, 0x3, @device_b, 0x2f}, @not_ext={{}, @device_a, 0xfff, "", 0xd}, @ext={{}, @broadcast, 0x9, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x80000000, "", 0x7}, @not_ext={{}, @broadcast, 0x4, "", 0x1e}, @not_ext={{}, @device_a, 0x79bce3da, "", 0x33}, @ext={{}, @device_a, 0x7ff8, @device_a, 0x10}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x63de, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x42, 0xf6ca}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x35, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7ff, @val=0x7f, @val=0x1f, @void}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @none, 0x1, 0x2}, 0xe) 08:16:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffe, 0x2}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xa, 0xffffffff, 0x200, 0x800}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xea, @none, 0x6f8, 0x2}, 0xe) 08:16:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x40, 0x2, 0x6, 0xff, 0x4, 0x99, 0x2, 0xd}}) 08:16:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x25c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x104, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x5, 0x2b}}, @ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x80, @val={0x0, 0x10, @random="f749b0c858d6bb0883b4cd396f8b66de"}, @void, @void, @val={0x4, 0x6, {0x7, 0xe1, 0xc5c6, 0x6}}, @void, @val={0x5, 0x6c, {0x2, 0xfe, 0x4a, "4a8d6a2f384ef230214f465f579c4c1be06b99af59a9cfeed0f00d63519ffc70f4f7693d9e122f6656232813f5c53d5ec961c1f4d7a98ad3f71570550420da8a5a96b18fc5814605915856ab3ff6bbf501a9963286fdbac8267581eb33283f1328252f59c0bdfe92f1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1f, 0xaf, 0x20}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x2, 0x7f, 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0xff, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2c, 0x80, 0x1d, 0x1}}, [{0xdd, 0x1c, "f12329ab3ce382ab5beb807bc60a1de5a1c202ac7b14c89acad8448b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@cf={0x4, 0x6, {0x2, 0x7f, 0xe27, 0x8f}}, @dsss={0x3, 0x1, 0x74}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@peer_mgmt={0x75, 0x6, {0x1, 0x0, @void, @val=0x14, @void}}, @mesh_chsw={0x76, 0x6, {0x6, 0xff, 0x19}}, @rann={0x7e, 0x15, {{0x0, 0x66}, 0x7f, 0x6, @device_b, 0xfffffff9, 0x1, 0x82}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe4, 0x7f, [@chsw_timing={0x68, 0x4, {0x8001, 0x2}}, @perr={0x84, 0xaf, {0x3f, 0xb, [@not_ext={{}, @device_b, 0x3, "", 0x1e}, @ext={{}, @device_a, 0x8001, @broadcast, 0x10}, @ext={{}, @device_b, 0x0, @device_b, 0x12}, @not_ext={{}, @broadcast, 0x1, "", 0x4}, @ext={{}, @device_b, 0x3, @device_b, 0x2f}, @not_ext={{}, @device_a, 0xfff, "", 0xd}, @ext={{}, @broadcast, 0x9, @device_b, 0x4}, @not_ext={{}, @broadcast, 0x80000000, "", 0x7}, @not_ext={{}, @broadcast, 0x4, "", 0x1e}, @not_ext={{}, @device_a, 0x79bce3da, "", 0x33}, @ext={{}, @device_a, 0x7ff8, @device_a, 0x10}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x63de, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x42, 0xf6ca}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x35, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7ff, @val=0x7f, @val=0x1f, @void}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x200, @none, 0x1, 0x2}, 0xe) 08:16:54 executing program 1: socketpair(0x22, 0x80001, 0x40, &(0x7f00000001c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff, 0x1}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) openat$cgroup_pressure(r4, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r5, 0xe}, 0x10) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000480)) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x9da, 0xa, 0x4, 0x1, 0x95, {}, {0x5, 0xc, 0x1, 0x8, 0x9, 0x1, "c490242d"}, 0x883, 0x4, {}, 0x401}) 08:16:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x1, 0x8540, 0x7fff, 0x0, 0x4, 0x2}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x7, 0x6, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:54 executing program 5: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:16:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x1, 0x8540, 0x7fff, 0x0, 0x4, 0x2}) (async, rerun: 32) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x7, 0x6, 0x1}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:54 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4e9080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0xa172d275913ebd6e, 0x0) 08:16:54 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x58, 0x4) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) socketpair(0x21, 0x80000, 0x101, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000300)={0xf000000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x990965, 0x101, '\x00', @string=&(0x7f0000000280)=0x6}}) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0xffff, @any, 0x1}, 0xe) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000180)={0x6, "b3bcd0"}, 0x6) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept4$bt_l2cap(r2, 0x0, 0xfffffffffffffffc, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000200)={0x0, 0x0, {0x5, 0xfffffffc, 0x2004, 0x6, 0xa, 0x1}}) 08:16:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x1, 0x8540, 0x7fff, 0x0, 0x4, 0x2}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x7, 0x6, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x1, 0x8540, 0x7fff, 0x0, 0x4, 0x2}) (async) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x7, 0x6, 0x1}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:16:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4e9080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0xa172d275913ebd6e, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4e9080, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0xa172d275913ebd6e, 0x0) (async) 08:16:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x40, 0x2, 0x6, 0xff, 0x4, 0x99, 0x2, 0xd}}) 08:16:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x34) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x9f1, 0x2, 0x8}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)=@mmap={0x8, 0x6, 0x4, 0x400, 0x3, {}, {0x5, 0x0, 0x9, 0x2, 0x9, 0x8, "f34cfe51"}, 0x100, 0x1, {}, 0x2, 0x0, r5}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x4, 0x7f8, 0x0, 0x3, 0x0, 0xf83d, 0x8, 0x7ff, 0x2, 0x101, 0x7, 0x3, 0x0, 0xfffffffc, 0x8, 0x6, {0x3, 0x400}, 0x6}}) pipe2(&(0x7f00000000c0), 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000200)={0x5, 0x9, 0x5, 0x4900}) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000040), 0x80c00) 08:16:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=[{'MONITOR', @void}, {'SYNTH', @val={' \'', 'Synth Capture'}}, {'RADIO', @void}, {'LINE3', @val={' \'', 'Master Playback Volume'}}, {'VOLUME', @void}, {'VIDEO', @void}, {'SPEAKER', @void}, {'CD', @void}, {'OGAIN', @void}, {'DIGITAL1', @val={' \'', 'Master'}}], 0xb2) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000100)={0x9a8, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x23b, 0x7f, [@dsss={0x3, 0x1, 0x47}, @fast_bss_trans={0x37, 0x5e, {0x3a, 0x1, "d41acdf7e8adf78c55c4d4f858913699", "7c516cab696a0645a614150b352f0571dd165bc66d73d5d31bc852129e5c3a14", "d6cbc122f93b107b7c8fa1102f1160f9f7ae0a21e7d6c5839037819119be729e", [{0x2, 0xa, "f77f4ef808f400aa4aa7"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x1}}, @chsw_timing={0x68, 0x4, {0x410, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xf8, 0x0, @device_a, 0x5, 0x7ff}}, @tim={0x5, 0x99, {0x1, 0x46, 0xa5, "f10f154c86e99a34fb80b8c70e4f7912b35d276443dfc188227beb1cf93e322ee745afb81b3dc966d9f7b8762f9b18c7af1e6b17067ec2fb920a2dd0c7f4c01aa1e326f6ca2e99c49204a374998f79c9acb9ac46ed4ea21a708728454bd96ecb8dfee257f8d0371e2a8d12f37c53eb9a4013936a5d6b81637656c8cd6cd978e1095a2a3722010cebcf92cf2805877c084050a93ec2cc"}}, @perr={0x84, 0x10f, {0x0, 0x11, [@not_ext={{}, @device_a, 0x8, "", 0x1b}, @not_ext={{}, @device_b, 0x0, "", 0x39}, @ext={{}, @device_b, 0x8, @broadcast, 0x11}, @ext={{}, @device_a, 0xfff, @device_b, 0x9}, @ext={{}, @device_a, 0x5, @device_a, 0x13}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @not_ext={{}, @device_b, 0x2, "", 0x1f}, @ext={{}, @device_a, 0x5, @device_b, 0x30}, @ext={{}, @broadcast, 0x4, @device_b, 0x41}, @not_ext={{}, @broadcast, 0x7, "", 0xf}, @ext={{}, @broadcast, 0x8, @device_a, 0x9}, @not_ext={{}, @device_b, 0x25, "", 0x42}, @ext={{}, @device_a, 0x3, @broadcast, 0x37}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x1}, @ext={{}, @broadcast, 0x9, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x0, "", 0x28}]}}, @challenge={0x10, 0x1, 0x4b}]}, @NL80211_ATTR_IE={0x10e, 0x2a, [@measure_req={0x26, 0xc0, {0x1f, 0xaa, 0x8a, "b594502b3495f19b312251928ccc531c8d646c490fd4de720ab0c55023bdcb09b857c27354a8a24bbdf259ea5c057acb718ca19c9e08652d5213a163446fb3c60e99b1f79d7a50a01acc73064db5984359a4c94400ebfd78fa754f8a50fa78fac99bf3d0a75356668e3ad4e995f9cc634449f46bc9c788b5433bd767df0fbc7f87e9cfa59dd3649f01988a4ca07959f7548414de8a89e5bb69e1a6fe15a40e1fbb8d830a63c72daaf6580ad7c78a60a743d3a1101a6ea53362fe86d379"}}, @measure_req={0x26, 0x9, {0x1f, 0x2, 0x7, "c873e9d5633c"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x3990, 0x1f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x2, @device_a, 0x8, "", 0x1f, 0x867c, @device_a, 0x2}}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@random={0x5, 0x31, "026040734bb6b1b71959333ab9409f6de5342bef6592f87b76604542a30caa0e0a8b77e48f322b5173393c74440afa7c87"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0xb3, 0xf, [@fast_bss_trans={0x37, 0x6a, {0xf, 0x1, "3973ed469b3a32481c5be2915d3799df", "63be3ebb7983bdba448834c27ec71afa15e4c39827c983037241e8bfeb512488", "d47cae4f8f65b6cf5eccd0ff519ca82ea75be7c29a305026fc9fdf96b302cb2c", [{0x2, 0x16, "6614e086ad53b333356ee403d56f265c61dbad13d1e6"}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0xfffffffffffffc01, 0x40, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x6, 0x6e}}, @channel_switch={0x25, 0x3, {0x1, 0x5}}, @dsss={0x3, 0x1, 0xb2}, @challenge={0x10, 0x1, 0x44}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x3, 0x7f, 0x0, 0x14c, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x54e, 0x91, "b614a54ab358a64f3e559706c8bc86c4dd6d78db63a0ebe282fd6747d421ca26924966d514399b2fde0fc7b250e4dddc258eea113d8ec0afd55e45b72d62a016caf8d7bc7fd0d569c5c6c993eceae1808285ba10513906ae5c01cd720d2a8bd0a1a04d205b2f39882ea2d4950fac91b9b7af375fe9249cb44406c93995265cf3c3bdbd62b57055a56545c7033c97fe484f3368dd8b60a007ba1043a762106464c62d4baaf1d2adbe16ca7941005a08cf3c5c9d30cd4714229f96508a50c59deca52d4ffb5d7c0db7849e9c64518f722a12f6c6952bbe7169c3553784e0f12e8982e5020a611e1701b593df863cc1cdc00557edcfcd3cc608c0dbbd2dc6bd94b069a8f9f870627990429660a9460ab4dac52a4ee1bef762a1ccc560241c79c1c7106c0be827dcc1b6633cdacd5f84e50f220aff78381a798bee5bc300253d2b791658d7066c201f1de66f3ed495fac65e5485725a7a3a145e9e874590aee700c6431aad849455ac47961cec1f9796e87198761cfb70eb94f0588d6ea495604839e75e0a1f218354eddb40a6a9cf482827208ae5846157aabcc7b55e10d4a2abdecffc861b10c0ce840b907f6a04c3eb12779713a5ec6dfa871ec203c2953420df9e747d56c9f1278da430e1fe1693d0473e29ecd28122fc161f4f60f2117ee432fb78c028acfdaea75e6dfd3c6e50940829ec9d840d6edf79f2694bd417db41196459a269539a82d3fb494e56c5ff31fb8756290a02032942065a5943e49eee8fa9625b7a771e98731514bdf853cfc8cf6e8b4dbdf9d79a5234a90550e56ed123a3be9d81fea16d6f14f0321b03dd2b5d12c98695735253abf318d1ba56436d7d73fad026b2218953b4358e0e4c34abdd34bcf510257f372f45fd63c14161bc7abbfe4b31350b1b73ff1f3fbf88733c6ec8d26f48ade2332a4c21f8d40b6f5ef320f746655436c16f8290484bfbb6232e64890dd855176f2b86d9028c9490948db3c4b86fd426f5292af258136e26edd78ed6d3667a65a66c946e6a772472879405fc8ba242d7c8615ce6529d8a0fc6336563564b894c0569b7a2155f4dd3b55b3674978e56bb2df6436caa4c2e1faa7e7601896fb067bc22694bd49f1c62ebd729d751868710baade1a3bfaad357c901856ff78638e8875cc84d999de981584bb57195aedc10d950e514304111b22ed77a918e6abec4aa2d4bd11ef9d9988d94050bc1f6f7ece3954153c118c50b1e33a7c2db8e1e15c25518155aaa870efcbc4940a41dede7359b6b20cbc3452770df85ba77844bae9709cfc32065fcb4ec53c79fd8dc68cd001a998bf58dced2ceb3799252c19f69945ff7c821f632fb7d6748110ea12d015f054772f999237d012c03d0c0285b69164eb69996ed73b760d53699f5f5eace5282ad3b1739bf4c99a81eea80ecfaed939016bbf6273f36ee9530ec7f670c57d110f9360c1a2338e62cf24a1a83fb51434bb8472e40804fff49f2f3575261d8f560534b49ea33eda92a0016aad2a98327d9fd4195d028b789c47a4598a484e78fe5c9c68a08ee7e8a813753f5a21dbb8acbba31e8481d53cc92301dfbe2044097a5779a28e3f80b9315ea2f16c3f9212ee9f09a97a5b7b39ac795033c52adb688d86ad50dad794fde6a4797fd9ef4883969457170b031164a149e223c7526b81eacfa01df23422711fe1d4e354c2fbb78f3326b454cd13b4f41ad49b805e228bc499585d66e2bded8b1233e2233206530a503ab333bfbe0f8bc2b4e01f53477dc166df6581f60b02628a7a6e1a3d71ef99fa3a50f23a91e3fb9a0654fd523bb5d16205f06f1de6364521f3dc4d47e7b8257e9fcc3a1aab8c699f1abbaeea9f17b6d3d115a9d676e268e20c55ad1b808458acfbdc26d5dbb81ae268cb8eca972e583c04f"}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=[{'MONITOR', @void}, {'SYNTH', @val={' \'', 'Synth Capture'}}, {'RADIO', @void}, {'LINE3', @val={' \'', 'Master Playback Volume'}}, {'VOLUME', @void}, {'VIDEO', @void}, {'SPEAKER', @void}, {'CD', @void}, {'OGAIN', @void}, {'DIGITAL1', @val={' \'', 'Master'}}], 0xb2) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (rerun: 64) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=[{'MONITOR', @void}, {'SYNTH', @val={' \'', 'Synth Capture'}}, {'RADIO', @void}, {'LINE3', @val={' \'', 'Master Playback Volume'}}, {'VOLUME', @void}, {'VIDEO', @void}, {'SPEAKER', @void}, {'CD', @void}, {'OGAIN', @void}, {'DIGITAL1', @val={' \'', 'Master'}}], 0xb2) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) (async) 08:16:55 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x3, 0x2}, 0x2) 08:16:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:55 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x3, 0x2}, 0x2) 08:16:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x40, 0x2, 0x6, 0xff, 0x4, 0x99, 0x2, 0xd}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x40, 0x2, 0x6, 0xff, 0x4, 0x99, 0x2, 0xd}}) (async) 08:16:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x1000}, 0xe) 08:16:56 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x3, 0x2}, 0x2) 08:16:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000100)={0x9a8, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x23b, 0x7f, [@dsss={0x3, 0x1, 0x47}, @fast_bss_trans={0x37, 0x5e, {0x3a, 0x1, "d41acdf7e8adf78c55c4d4f858913699", "7c516cab696a0645a614150b352f0571dd165bc66d73d5d31bc852129e5c3a14", "d6cbc122f93b107b7c8fa1102f1160f9f7ae0a21e7d6c5839037819119be729e", [{0x2, 0xa, "f77f4ef808f400aa4aa7"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x1}}, @chsw_timing={0x68, 0x4, {0x410, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xf8, 0x0, @device_a, 0x5, 0x7ff}}, @tim={0x5, 0x99, {0x1, 0x46, 0xa5, "f10f154c86e99a34fb80b8c70e4f7912b35d276443dfc188227beb1cf93e322ee745afb81b3dc966d9f7b8762f9b18c7af1e6b17067ec2fb920a2dd0c7f4c01aa1e326f6ca2e99c49204a374998f79c9acb9ac46ed4ea21a708728454bd96ecb8dfee257f8d0371e2a8d12f37c53eb9a4013936a5d6b81637656c8cd6cd978e1095a2a3722010cebcf92cf2805877c084050a93ec2cc"}}, @perr={0x84, 0x10f, {0x0, 0x11, [@not_ext={{}, @device_a, 0x8, "", 0x1b}, @not_ext={{}, @device_b, 0x0, "", 0x39}, @ext={{}, @device_b, 0x8, @broadcast, 0x11}, @ext={{}, @device_a, 0xfff, @device_b, 0x9}, @ext={{}, @device_a, 0x5, @device_a, 0x13}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @not_ext={{}, @device_b, 0x2, "", 0x1f}, @ext={{}, @device_a, 0x5, @device_b, 0x30}, @ext={{}, @broadcast, 0x4, @device_b, 0x41}, @not_ext={{}, @broadcast, 0x7, "", 0xf}, @ext={{}, @broadcast, 0x8, @device_a, 0x9}, @not_ext={{}, @device_b, 0x25, "", 0x42}, @ext={{}, @device_a, 0x3, @broadcast, 0x37}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x1}, @ext={{}, @broadcast, 0x9, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x0, "", 0x28}]}}, @challenge={0x10, 0x1, 0x4b}]}, @NL80211_ATTR_IE={0x10e, 0x2a, [@measure_req={0x26, 0xc0, {0x1f, 0xaa, 0x8a, "b594502b3495f19b312251928ccc531c8d646c490fd4de720ab0c55023bdcb09b857c27354a8a24bbdf259ea5c057acb718ca19c9e08652d5213a163446fb3c60e99b1f79d7a50a01acc73064db5984359a4c94400ebfd78fa754f8a50fa78fac99bf3d0a75356668e3ad4e995f9cc634449f46bc9c788b5433bd767df0fbc7f87e9cfa59dd3649f01988a4ca07959f7548414de8a89e5bb69e1a6fe15a40e1fbb8d830a63c72daaf6580ad7c78a60a743d3a1101a6ea53362fe86d379"}}, @measure_req={0x26, 0x9, {0x1f, 0x2, 0x7, "c873e9d5633c"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x3990, 0x1f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x2, @device_a, 0x8, "", 0x1f, 0x867c, @device_a, 0x2}}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@random={0x5, 0x31, "026040734bb6b1b71959333ab9409f6de5342bef6592f87b76604542a30caa0e0a8b77e48f322b5173393c74440afa7c87"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0xb3, 0xf, [@fast_bss_trans={0x37, 0x6a, {0xf, 0x1, "3973ed469b3a32481c5be2915d3799df", "63be3ebb7983bdba448834c27ec71afa15e4c39827c983037241e8bfeb512488", "d47cae4f8f65b6cf5eccd0ff519ca82ea75be7c29a305026fc9fdf96b302cb2c", [{0x2, 0x16, "6614e086ad53b333356ee403d56f265c61dbad13d1e6"}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0xfffffffffffffc01, 0x40, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x6, 0x6e}}, @channel_switch={0x25, 0x3, {0x1, 0x5}}, @dsss={0x3, 0x1, 0xb2}, @challenge={0x10, 0x1, 0x44}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x3, 0x7f, 0x0, 0x14c, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x54e, 0x91, "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"}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) 08:16:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x1000}, 0xe) 08:16:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 08:16:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) socketpair(0x25, 0x3, 0x1e2b, &(0x7f0000000040)={0xffffffffffffffff}) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) 08:16:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x1000}, 0xe) 08:16:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000100)={0x9a8, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x23b, 0x7f, [@dsss={0x3, 0x1, 0x47}, @fast_bss_trans={0x37, 0x5e, {0x3a, 0x1, "d41acdf7e8adf78c55c4d4f858913699", "7c516cab696a0645a614150b352f0571dd165bc66d73d5d31bc852129e5c3a14", "d6cbc122f93b107b7c8fa1102f1160f9f7ae0a21e7d6c5839037819119be729e", [{0x2, 0xa, "f77f4ef808f400aa4aa7"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x1}}, @chsw_timing={0x68, 0x4, {0x410, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xf8, 0x0, @device_a, 0x5, 0x7ff}}, @tim={0x5, 0x99, {0x1, 0x46, 0xa5, "f10f154c86e99a34fb80b8c70e4f7912b35d276443dfc188227beb1cf93e322ee745afb81b3dc966d9f7b8762f9b18c7af1e6b17067ec2fb920a2dd0c7f4c01aa1e326f6ca2e99c49204a374998f79c9acb9ac46ed4ea21a708728454bd96ecb8dfee257f8d0371e2a8d12f37c53eb9a4013936a5d6b81637656c8cd6cd978e1095a2a3722010cebcf92cf2805877c084050a93ec2cc"}}, @perr={0x84, 0x10f, {0x0, 0x11, [@not_ext={{}, @device_a, 0x8, "", 0x1b}, @not_ext={{}, @device_b, 0x0, "", 0x39}, @ext={{}, @device_b, 0x8, @broadcast, 0x11}, @ext={{}, @device_a, 0xfff, @device_b, 0x9}, @ext={{}, @device_a, 0x5, @device_a, 0x13}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @not_ext={{}, @device_b, 0x2, "", 0x1f}, @ext={{}, @device_a, 0x5, @device_b, 0x30}, @ext={{}, @broadcast, 0x4, @device_b, 0x41}, @not_ext={{}, @broadcast, 0x7, "", 0xf}, @ext={{}, @broadcast, 0x8, @device_a, 0x9}, @not_ext={{}, @device_b, 0x25, "", 0x42}, @ext={{}, @device_a, 0x3, @broadcast, 0x37}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x1}, @ext={{}, @broadcast, 0x9, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x0, "", 0x28}]}}, @challenge={0x10, 0x1, 0x4b}]}, @NL80211_ATTR_IE={0x10e, 0x2a, [@measure_req={0x26, 0xc0, {0x1f, 0xaa, 0x8a, "b594502b3495f19b312251928ccc531c8d646c490fd4de720ab0c55023bdcb09b857c27354a8a24bbdf259ea5c057acb718ca19c9e08652d5213a163446fb3c60e99b1f79d7a50a01acc73064db5984359a4c94400ebfd78fa754f8a50fa78fac99bf3d0a75356668e3ad4e995f9cc634449f46bc9c788b5433bd767df0fbc7f87e9cfa59dd3649f01988a4ca07959f7548414de8a89e5bb69e1a6fe15a40e1fbb8d830a63c72daaf6580ad7c78a60a743d3a1101a6ea53362fe86d379"}}, @measure_req={0x26, 0x9, {0x1f, 0x2, 0x7, "c873e9d5633c"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x3990, 0x1f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x2, @device_a, 0x8, "", 0x1f, 0x867c, @device_a, 0x2}}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@random={0x5, 0x31, "026040734bb6b1b71959333ab9409f6de5342bef6592f87b76604542a30caa0e0a8b77e48f322b5173393c74440afa7c87"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0xb3, 0xf, [@fast_bss_trans={0x37, 0x6a, {0xf, 0x1, "3973ed469b3a32481c5be2915d3799df", "63be3ebb7983bdba448834c27ec71afa15e4c39827c983037241e8bfeb512488", "d47cae4f8f65b6cf5eccd0ff519ca82ea75be7c29a305026fc9fdf96b302cb2c", [{0x2, 0x16, "6614e086ad53b333356ee403d56f265c61dbad13d1e6"}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0xfffffffffffffc01, 0x40, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x6, 0x6e}}, @channel_switch={0x25, 0x3, {0x1, 0x5}}, @dsss={0x3, 0x1, 0xb2}, @challenge={0x10, 0x1, 0x44}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x3, 0x7f, 0x0, 0x14c, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x54e, 0x91, "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"}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000100)={0x9a8, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x23b, 0x7f, [@dsss={0x3, 0x1, 0x47}, @fast_bss_trans={0x37, 0x5e, {0x3a, 0x1, "d41acdf7e8adf78c55c4d4f858913699", "7c516cab696a0645a614150b352f0571dd165bc66d73d5d31bc852129e5c3a14", "d6cbc122f93b107b7c8fa1102f1160f9f7ae0a21e7d6c5839037819119be729e", [{0x2, 0xa, "f77f4ef808f400aa4aa7"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x1}}, @chsw_timing={0x68, 0x4, {0x410, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xf8, 0x0, @device_a, 0x5, 0x7ff}}, @tim={0x5, 0x99, {0x1, 0x46, 0xa5, "f10f154c86e99a34fb80b8c70e4f7912b35d276443dfc188227beb1cf93e322ee745afb81b3dc966d9f7b8762f9b18c7af1e6b17067ec2fb920a2dd0c7f4c01aa1e326f6ca2e99c49204a374998f79c9acb9ac46ed4ea21a708728454bd96ecb8dfee257f8d0371e2a8d12f37c53eb9a4013936a5d6b81637656c8cd6cd978e1095a2a3722010cebcf92cf2805877c084050a93ec2cc"}}, @perr={0x84, 0x10f, {0x0, 0x11, [@not_ext={{}, @device_a, 0x8, "", 0x1b}, @not_ext={{}, @device_b, 0x0, "", 0x39}, @ext={{}, @device_b, 0x8, @broadcast, 0x11}, @ext={{}, @device_a, 0xfff, @device_b, 0x9}, @ext={{}, @device_a, 0x5, @device_a, 0x13}, @not_ext={{}, @device_a, 0x3, "", 0x1c}, @not_ext={{}, @device_b, 0x2, "", 0x1f}, @ext={{}, @device_a, 0x5, @device_b, 0x30}, @ext={{}, @broadcast, 0x4, @device_b, 0x41}, @not_ext={{}, @broadcast, 0x7, "", 0xf}, @ext={{}, @broadcast, 0x8, @device_a, 0x9}, @not_ext={{}, @device_b, 0x25, "", 0x42}, @ext={{}, @device_a, 0x3, @broadcast, 0x37}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x1}, @ext={{}, @broadcast, 0x9, @broadcast, 0x4}, @not_ext={{}, @broadcast, 0x0, "", 0x28}]}}, @challenge={0x10, 0x1, 0x4b}]}, @NL80211_ATTR_IE={0x10e, 0x2a, [@measure_req={0x26, 0xc0, {0x1f, 0xaa, 0x8a, "b594502b3495f19b312251928ccc531c8d646c490fd4de720ab0c55023bdcb09b857c27354a8a24bbdf259ea5c057acb718ca19c9e08652d5213a163446fb3c60e99b1f79d7a50a01acc73064db5984359a4c94400ebfd78fa754f8a50fa78fac99bf3d0a75356668e3ad4e995f9cc634449f46bc9c788b5433bd767df0fbc7f87e9cfa59dd3649f01988a4ca07959f7548414de8a89e5bb69e1a6fe15a40e1fbb8d830a63c72daaf6580ad7c78a60a743d3a1101a6ea53362fe86d379"}}, @measure_req={0x26, 0x9, {0x1f, 0x2, 0x7, "c873e9d5633c"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x3990, 0x1f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x2, @device_a, 0x8, "", 0x1f, 0x867c, @device_a, 0x2}}]}, @NL80211_ATTR_IE={0x3a, 0x2a, [@random={0x5, 0x31, "026040734bb6b1b71959333ab9409f6de5342bef6592f87b76604542a30caa0e0a8b77e48f322b5173393c74440afa7c87"}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0xb3, 0xf, [@fast_bss_trans={0x37, 0x6a, {0xf, 0x1, "3973ed469b3a32481c5be2915d3799df", "63be3ebb7983bdba448834c27ec71afa15e4c39827c983037241e8bfeb512488", "d47cae4f8f65b6cf5eccd0ff519ca82ea75be7c29a305026fc9fdf96b302cb2c", [{0x2, 0x16, "6614e086ad53b333356ee403d56f265c61dbad13d1e6"}]}}, @ht={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0xfffffffffffffc01, 0x40, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x6, 0x6e}}, @channel_switch={0x25, 0x3, {0x1, 0x5}}, @dsss={0x3, 0x1, 0xb2}, @challenge={0x10, 0x1, 0x44}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x2, 0x0, {0x3, 0x7f, 0x0, 0x14c, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x54e, 0x91, "b614a54ab358a64f3e559706c8bc86c4dd6d78db63a0ebe282fd6747d421ca26924966d514399b2fde0fc7b250e4dddc258eea113d8ec0afd55e45b72d62a016caf8d7bc7fd0d569c5c6c993eceae1808285ba10513906ae5c01cd720d2a8bd0a1a04d205b2f39882ea2d4950fac91b9b7af375fe9249cb44406c93995265cf3c3bdbd62b57055a56545c7033c97fe484f3368dd8b60a007ba1043a762106464c62d4baaf1d2adbe16ca7941005a08cf3c5c9d30cd4714229f96508a50c59deca52d4ffb5d7c0db7849e9c64518f722a12f6c6952bbe7169c3553784e0f12e8982e5020a611e1701b593df863cc1cdc00557edcfcd3cc608c0dbbd2dc6bd94b069a8f9f870627990429660a9460ab4dac52a4ee1bef762a1ccc560241c79c1c7106c0be827dcc1b6633cdacd5f84e50f220aff78381a798bee5bc300253d2b791658d7066c201f1de66f3ed495fac65e5485725a7a3a145e9e874590aee700c6431aad849455ac47961cec1f9796e87198761cfb70eb94f0588d6ea495604839e75e0a1f218354eddb40a6a9cf482827208ae5846157aabcc7b55e10d4a2abdecffc861b10c0ce840b907f6a04c3eb12779713a5ec6dfa871ec203c2953420df9e747d56c9f1278da430e1fe1693d0473e29ecd28122fc161f4f60f2117ee432fb78c028acfdaea75e6dfd3c6e50940829ec9d840d6edf79f2694bd417db41196459a269539a82d3fb494e56c5ff31fb8756290a02032942065a5943e49eee8fa9625b7a771e98731514bdf853cfc8cf6e8b4dbdf9d79a5234a90550e56ed123a3be9d81fea16d6f14f0321b03dd2b5d12c98695735253abf318d1ba56436d7d73fad026b2218953b4358e0e4c34abdd34bcf510257f372f45fd63c14161bc7abbfe4b31350b1b73ff1f3fbf88733c6ec8d26f48ade2332a4c21f8d40b6f5ef320f746655436c16f8290484bfbb6232e64890dd855176f2b86d9028c9490948db3c4b86fd426f5292af258136e26edd78ed6d3667a65a66c946e6a772472879405fc8ba242d7c8615ce6529d8a0fc6336563564b894c0569b7a2155f4dd3b55b3674978e56bb2df6436caa4c2e1faa7e7601896fb067bc22694bd49f1c62ebd729d751868710baade1a3bfaad357c901856ff78638e8875cc84d999de981584bb57195aedc10d950e514304111b22ed77a918e6abec4aa2d4bd11ef9d9988d94050bc1f6f7ece3954153c118c50b1e33a7c2db8e1e15c25518155aaa870efcbc4940a41dede7359b6b20cbc3452770df85ba77844bae9709cfc32065fcb4ec53c79fd8dc68cd001a998bf58dced2ceb3799252c19f69945ff7c821f632fb7d6748110ea12d015f054772f999237d012c03d0c0285b69164eb69996ed73b760d53699f5f5eace5282ad3b1739bf4c99a81eea80ecfaed939016bbf6273f36ee9530ec7f670c57d110f9360c1a2338e62cf24a1a83fb51434bb8472e40804fff49f2f3575261d8f560534b49ea33eda92a0016aad2a98327d9fd4195d028b789c47a4598a484e78fe5c9c68a08ee7e8a813753f5a21dbb8acbba31e8481d53cc92301dfbe2044097a5779a28e3f80b9315ea2f16c3f9212ee9f09a97a5b7b39ac795033c52adb688d86ad50dad794fde6a4797fd9ef4883969457170b031164a149e223c7526b81eacfa01df23422711fe1d4e354c2fbb78f3326b454cd13b4f41ad49b805e228bc499585d66e2bded8b1233e2233206530a503ab333bfbe0f8bc2b4e01f53477dc166df6581f60b02628a7a6e1a3d71ef99fa3a50f23a91e3fb9a0654fd523bb5d16205f06f1de6364521f3dc4d47e7b8257e9fcc3a1aab8c699f1abbaeea9f17b6d3d115a9d676e268e20c55ad1b808458acfbdc26d5dbb81ae268cb8eca972e583c04f"}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) (async) 08:16:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:56 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 08:16:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) 08:16:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) socketpair(0x25, 0x3, 0x1e2b, &(0x7f0000000040)={0xffffffffffffffff}) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) 08:16:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) 08:16:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 08:16:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:16:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:57 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x101, 0x6, 0x1, 0x81, 0xb2, 0x2}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x488f}, 0xe) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x1f}, 0x2) 08:16:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 2912.945957] misc userio: The device must be registered before sending interrupts 08:16:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 08:16:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) socketpair(0x25, 0x3, 0x1e2b, &(0x7f0000000040)={0xffffffffffffffff}) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) 08:16:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) (async) 08:16:58 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x101, 0x6, 0x1, 0x81, 0xb2, 0x2}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x488f}, 0xe) (async) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x1f}, 0x2) 08:16:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:58 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:58 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x101, 0x6, 0x1, 0x81, 0xb2, 0x2}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x488f}, 0xe) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x1f}, 0x2) pipe2(&(0x7f0000000040), 0x4000) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x101, 0x6, 0x1, 0x81, 0xb2, 0x2}, 0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x488f}, 0xe) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x1f}, 0x2) (async) [ 2913.778502] misc userio: The device must be registered before sending interrupts 08:16:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) (async) [ 2913.907410] misc userio: The device must be registered before sending interrupts [ 2913.920651] misc userio: The device must be registered before sending interrupts [ 2913.961328] Bluetooth: hci5: command 0x0405 tx timeout 08:16:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x3f, 0x1f, 0x9, 0x2e}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:16:59 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_open_pts(0xffffffffffffffff, 0x80400) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0xc0800) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xffe0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x18, 0x4) 08:16:59 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:59 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) syz_open_pts(0xffffffffffffffff, 0x80400) (async, rerun: 32) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0xc0800) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xffe0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x18, 0x4) 08:16:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:59 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:16:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:59 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:16:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x3f, 0x1f, 0x9, 0x2e}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x3f, 0x1f, 0x9, 0x2e}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:16:59 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_open_pts(0xffffffffffffffff, 0x80400) (async, rerun: 64) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0xc0800) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xffe0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x18, 0x4) 08:16:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:16:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @none, 0x9, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x5, 0x3, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0xe79, 0x401, 0x8001, 0x81, 0x1, 0xff, 0x800}, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000800}, 0x10000001) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x2, "b2296e"}, 0x6) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x84800) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) socketpair(0x5, 0x2, 0x7ff, &(0x7f0000000280)) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000200)=0x6) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:16:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) 08:16:59 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:16:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:16:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) (async) 08:17:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x3f, 0x1f, 0x9, 0x2e}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:00 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:17:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) (async) 08:17:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @none, 0x9, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x5, 0x3, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0xe79, 0x401, 0x8001, 0x81, 0x1, 0xff, 0x800}, 0xc) (async) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000800}, 0x10000001) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x2, "b2296e"}, 0x6) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x84800) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) socketpair(0x5, 0x2, 0x7ff, &(0x7f0000000280)) (async) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000200)=0x6) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:17:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (rerun: 64) 08:17:01 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x1, "9740ef"}, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0xff7f, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "b70bbc"}, 0x6) 08:17:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x4, @none, 0x9, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x5, 0x3, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0xe79, 0x401, 0x8001, 0x81, 0x1, 0xff, 0x800}, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4000800}, 0x10000001) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x2, "b2296e"}, 0x6) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x84800) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) socketpair(0x5, 0x2, 0x7ff, &(0x7f0000000280)) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000200)=0x6) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:17:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 08:17:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 08:17:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 08:17:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (rerun: 32) 08:17:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff}, 0xe) 08:17:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x1, "9740ef"}, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0xff7f, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "b70bbc"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000100), 0x0) (async) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x1, "9740ef"}, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0xff7f, 0x1}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "b70bbc"}, 0x6) (async) 08:17:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x1000002e, 0x30, 0x14, 0x20e, 0xa, 0x3, 0x3, 0x4a}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80080) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000140)={0x53a, 0x3234564e, 0x5, 0x3, 0x2, @stepwise={{0x5, 0x4}, {0x2, 0xffffffff}, {0xca2, 0x5}}}) 08:17:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff}, 0xe) 08:17:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x1, "9740ef"}, 0x6) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0xff7f, 0x1}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "b70bbc"}, 0x6) 08:17:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x1000002e, 0x30, 0x14, 0x20e, 0xa, 0x3, 0x3, 0x4a}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80080) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000140)={0x53a, 0x3234564e, 0x5, 0x3, 0x2, @stepwise={{0x5, 0x4}, {0x2, 0xffffffff}, {0xca2, 0x5}}}) 08:17:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3ff}, 0xe) 08:17:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 64) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async, rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (rerun: 64) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0x1000002e, 0x30, 0x14, 0x20e, 0xa, 0x3, 0x3, 0x4a}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80080) (rerun: 32) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000140)={0x53a, 0x3234564e, 0x5, 0x3, 0x2, @stepwise={{0x5, 0x4}, {0x2, 0xffffffff}, {0xca2, 0x5}}}) 08:17:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:03 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010125bd7000fbdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfb0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @any, 0x5, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000300)={0x1, 0x1f}) socket$inet_udplite(0x2, 0x2, 0x88) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (rerun: 64) 08:17:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000080)) 08:17:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 08:17:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 08:17:04 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010125bd7000fbdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfb0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @any, 0x5, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000300)={0x1, 0x1f}) socket$inet_udplite(0x2, 0x2, 0x88) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) 08:17:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x80000001, "d0099156d1aa42813da7edd6fd556e892a2dd9eae92b649ec68f3256717b49a2", 0x3, 0x1}) socketpair(0x1e, 0x2, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000080)) 08:17:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) 08:17:04 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:17:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) (async) 08:17:05 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010125bd7000fbdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfb0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @any, 0x5, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000300)={0x1, 0x1f}) socket$inet_udplite(0x2, 0x2, 0x88) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010125bd7000fbdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfb0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @any, 0x5, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000300)={0x1, 0x1f}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) 08:17:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) (async) 08:17:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none}, 0xe) (async) 08:17:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) 08:17:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x80000001, "d0099156d1aa42813da7edd6fd556e892a2dd9eae92b649ec68f3256717b49a2", 0x3, 0x1}) socketpair(0x1e, 0x2, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:05 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:17:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) 08:17:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:05 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:17:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) 08:17:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 64) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) (rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:05 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 08:17:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x800) 08:17:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @any, 0x81, 0x1}, 0xe) 08:17:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x80000001, "d0099156d1aa42813da7edd6fd556e892a2dd9eae92b649ec68f3256717b49a2", 0x3, 0x1}) socketpair(0x1e, 0x2, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x80000001, "d0099156d1aa42813da7edd6fd556e892a2dd9eae92b649ec68f3256717b49a2", 0x3, 0x1}) (async) socketpair(0x1e, 0x2, 0x7, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x33, "1ffb81"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) 08:17:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) 08:17:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x802}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x5, @any, 0x3}, 0xe) 08:17:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x33, "1ffb81"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x33, "1ffb81"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400), 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x101, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 08:17:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x33, "1ffb81"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x33, "1ffb81"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x802}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x5, @any, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x802}, 0xe) (async) pipe2(&(0x7f00000000c0), 0x4880) (async) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x5, @any, 0x3}, 0xe) (async) 08:17:07 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 08:17:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 08:17:07 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) 08:17:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x7f800, 0x8, 0x7fff, 0x8}, 0x1, 0x5, &(0x7f0000000040)={{0x800, 0x9, 0x601, 0xffffffff}}, 0x7c8, &(0x7f00000001c0)="9b389c17192daf392a3696", 0xff}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:08 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 0: socketpair(0x3, 0xa, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 08:17:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x7f800, 0x8, 0x7fff, 0x8}, 0x1, 0x5, &(0x7f0000000040)={{0x800, 0x9, 0x601, 0xffffffff}}, 0x7c8, &(0x7f00000001c0)="9b389c17192daf392a3696", 0xff}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x802}, 0xe) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x5, @any, 0x3}, 0xe) 08:17:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x7f800, 0x8, 0x7fff, 0x8}, 0x1, 0x5, &(0x7f0000000040)={{0x800, 0x9, 0x601, 0xffffffff}}, 0x7c8, &(0x7f00000001c0)="9b389c17192daf392a3696", 0xff}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:08 executing program 0: socketpair(0x3, 0xa, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 08:17:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) 08:17:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:17:08 executing program 0: socketpair(0x3, 0xa, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) socketpair(0x3, 0xa, 0x8, &(0x7f00000000c0)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x101}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) (async) 08:17:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:17:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000002d0000000a001a00080211000001000000001a00fffffffffffb000064fe0600ffffffffffff00000400000000000000000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff00000ae9580000000000000000000a0006000802110000000000"], 0x94}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 08:17:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:17:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r3, 0x400000) 08:17:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0xad, "cd85c8"}, 0x6) 08:17:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0xad, "cd85c8"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0xad, "cd85c8"}, 0x6) (async) 08:17:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0xad, "cd85c8"}, 0x6) 08:17:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000002d0000000a001a00080211000001000000001a00fffffffffffb000064fe0600ffffffffffff00000400000000000000000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff00000ae9580000000000000000000a0006000802110000000000"], 0x94}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000084) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000002d0000000a001a00080211000001000000001a00fffffffffffb000064fe0600ffffffffffff00000400000000000000000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff00000ae9580000000000000000000a0006000802110000000000"], 0x94}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000084) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) 08:17:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r3, 0x400000) 08:17:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000002d0000000a001a00080211000001000000001a00fffffffffffb000064fe0600ffffffffffff00000400000000000000000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff00000ae9580000000000000000000a0006000802110000000000"], 0x94}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000084) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 08:17:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) 08:17:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f0000000040), 0x80000) (async) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) (async) 08:17:11 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_open_pts(r3, 0x400000) 08:17:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:11 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f0000000040), 0x80000) (async) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) (async) 08:17:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 08:17:11 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:11 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x7, "2537eaf6f5f60c89126a07259dd321b66bfbd31be5d1be46892133b03958c955"}) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x30, 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) 08:17:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x9}) 08:17:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xf71, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x2, 0x3, 0x5, 0x2, 0x7fffffff, 0x7, 0x8, 0x5, 0x6, 0x0, 0x8, 0x1, 0x88, 0x3, 0x3ff, 0x400, 0x0, 0x6c55, 0x2, 0x2, 0x0, 0x2, 0xfffffbff, 0x1, 0x7, 0x4, 0x1ff, 0x100, 0x7, 0x1, 0x3]}) 08:17:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x7, "2537eaf6f5f60c89126a07259dd321b66bfbd31be5d1be46892133b03958c955"}) (async) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x9}) (async) 08:17:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x7, "2537eaf6f5f60c89126a07259dd321b66bfbd31be5d1be46892133b03958c955"}) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80080) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x7, "2537eaf6f5f60c89126a07259dd321b66bfbd31be5d1be46892133b03958c955"}) (async) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:12 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x2, 0x8, 0x0, 0xfffffffa, 0xbcb, 0x611, 0x11}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x74b9, "5259354c2f94d4553f68cee3f504707a39a0708c102e5895ef83544f17a0513f", 0x1, 0x100, 0x5, 0xb700, 0x0, 0x4}) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x8001, '\x00', &(0x7f0000000040)=0x9}) (async) 08:17:13 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xf71, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x2, 0x3, 0x5, 0x2, 0x7fffffff, 0x7, 0x8, 0x5, 0x6, 0x0, 0x8, 0x1, 0x88, 0x3, 0x3ff, 0x400, 0x0, 0x6c55, 0x2, 0x2, 0x0, 0x2, 0xfffffbff, 0x1, 0x7, 0x4, 0x1ff, 0x100, 0x7, 0x1, 0x3]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xf71, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x2, 0x3, 0x5, 0x2, 0x7fffffff, 0x7, 0x8, 0x5, 0x6, 0x0, 0x8, 0x1, 0x88, 0x3, 0x3ff, 0x400, 0x0, 0x6c55, 0x2, 0x2, 0x0, 0x2, 0xfffffbff, 0x1, 0x7, 0x4, 0x1ff, 0x100, 0x7, 0x1, 0x3]}) (async) 08:17:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) 08:17:13 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x2, 0x8, 0x0, 0xfffffffa, 0xbcb, 0x611, 0x11}}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x74b9, "5259354c2f94d4553f68cee3f504707a39a0708c102e5895ef83544f17a0513f", 0x1, 0x100, 0x5, 0xb700, 0x0, 0x4}) (async) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (rerun: 32) 08:17:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:13 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x2, 0x8, 0x0, 0xfffffffa, 0xbcb, 0x611, 0x11}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x74b9, "5259354c2f94d4553f68cee3f504707a39a0708c102e5895ef83544f17a0513f", 0x1, 0x100, 0x5, 0xb700, 0x0, 0x4}) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x2, 0x8, 0x0, 0xfffffffa, 0xbcb, 0x611, 0x11}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x74b9, "5259354c2f94d4553f68cee3f504707a39a0708c102e5895ef83544f17a0513f", 0x1, 0x100, 0x5, 0xb700, 0x0, 0x4}) (async) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) 08:17:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 08:17:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:14 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000140)) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xf71, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}}) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x9, 0x2, 0x3, 0x5, 0x2, 0x7fffffff, 0x7, 0x8, 0x5, 0x6, 0x0, 0x8, 0x1, 0x88, 0x3, 0x3ff, 0x400, 0x0, 0x6c55, 0x2, 0x2, 0x0, 0x2, 0xfffffbff, 0x1, 0x7, 0x4, 0x1ff, 0x100, 0x7, 0x1, 0x3]}) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x0, '>#;'}, 0x6) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) socketpair(0x21, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x0, '>#;'}, 0x6) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) socketpair(0x21, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x0, '>#;'}, 0x6) (async) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) (async) socketpair(0x21, 0x2, 0x0, &(0x7f0000000040)) (async) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) (async) 08:17:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140)={0x0, '>#;'}, 0x6) (async) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) (async) socketpair(0x21, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$bt_l2cap(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "90ec31"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "90ec31"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "90ec31"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, "90ec31"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000040)="46850cf62529c9dfc7804c56d0999f1fa6fccc1a8e81885bc40e3117992c272cb6cbdea302df6833d468fcc5d357d8078675af68eea3ad2adda187176198f3ce5a3d1858f713385bdfb2951b985fad0602ed22cfe138d84e4f0f6707a4e89b39eef542fc9ede3231b6789e4a7ba7e627a2771829d01fa3304badb2995626c49cbe2a11f2618b6f48ea24c7b289518958b04f3412ef5040a2f084c8243f33cedccaeed0dad821ed436cf8e1563785a88e7f595d5f1774d2640f116c61ee46605f3f39462070afbf66c065d46d0edf311b677a536c19e4db45431d35883eea764e4ce5", {0x2, 0x9, 0x32314142, 0x6, 0x3, 0x0, 0xa, 0x800}}) 08:17:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1f, @none, 0x3f1, 0x1}, 0xe) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000040)="46850cf62529c9dfc7804c56d0999f1fa6fccc1a8e81885bc40e3117992c272cb6cbdea302df6833d468fcc5d357d8078675af68eea3ad2adda187176198f3ce5a3d1858f713385bdfb2951b985fad0602ed22cfe138d84e4f0f6707a4e89b39eef542fc9ede3231b6789e4a7ba7e627a2771829d01fa3304badb2995626c49cbe2a11f2618b6f48ea24c7b289518958b04f3412ef5040a2f084c8243f33cedccaeed0dad821ed436cf8e1563785a88e7f595d5f1774d2640f116c61ee46605f3f39462070afbf66c065d46d0edf311b677a536c19e4db45431d35883eea764e4ce5", {0x2, 0x9, 0x32314142, 0x6, 0x3, 0x0, 0xa, 0x800}}) 08:17:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000040)="46850cf62529c9dfc7804c56d0999f1fa6fccc1a8e81885bc40e3117992c272cb6cbdea302df6833d468fcc5d357d8078675af68eea3ad2adda187176198f3ce5a3d1858f713385bdfb2951b985fad0602ed22cfe138d84e4f0f6707a4e89b39eef542fc9ede3231b6789e4a7ba7e627a2771829d01fa3304badb2995626c49cbe2a11f2618b6f48ea24c7b289518958b04f3412ef5040a2f084c8243f33cedccaeed0dad821ed436cf8e1563785a88e7f595d5f1774d2640f116c61ee46605f3f39462070afbf66c065d46d0edf311b677a536c19e4db45431d35883eea764e4ce5", {0x2, 0x9, 0x32314142, 0x6, 0x3, 0x0, 0xa, 0x800}}) 08:17:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x81, 0x5, 0x8, 0x800}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1f, @none, 0x3f1, 0x1}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400), 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000003c0)) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4d, @any, 0x3ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "785913"}, 0x6) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x1, {0xffff, 0xfffffffa}, 0x5, 0x1ff}}) r4 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) pipe2(&(0x7f0000000400), 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000003c0)) (async, rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4d, @any, 0x3ff, 0x1}, 0xe) (rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "785913"}, 0x6) (async) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x1, {0xffff, 0xfffffffa}, 0x5, 0x1ff}}) (async) r4 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) 08:17:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1f, @none, 0x3f1, 0x1}, 0xe) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000003c0)) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4d, @any, 0x3ff, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "785913"}, 0x6) (rerun: 32) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x1, {0xffff, 0xfffffffa}, 0x5, 0x1ff}}) (async) r4 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400), 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x2}, 0xe) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x2, 0x6, 0xfff, 0x3e03a2a4, 0x3}) 08:17:17 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x4, 0x400}) 08:17:17 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x80000001, 0xffffffff, 0x2002, 0x8, 0xa, 0x2, 0x0, 0x7}}) 08:17:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x2}, 0xe) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x2, 0x6, 0xfff, 0x3e03a2a4, 0x3}) 08:17:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:17 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x1, 0x2, 0x6, 0xfff, 0x3e03a2a4, 0x3}) 08:17:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x71}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x37, 0x2, {0x1, @pix={0x0, 0x1, 0x32314752, 0x8, 0x7ff, 0x1000, 0x3, 0x298, 0x1, 0x8}}, 0x1}) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x81, @none, 0xfff7}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 08:17:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x4, 0x400}) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x80000001, 0xffffffff, 0x2002, 0x8, 0xa, 0x2, 0x0, 0x7}}) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x71}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x37, 0x2, {0x1, @pix={0x0, 0x1, 0x32314752, 0x8, 0x7ff, 0x1000, 0x3, 0x298, 0x1, 0x8}}, 0x1}) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x81, @none, 0xfff7}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x71}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x37, 0x2, {0x1, @pix={0x0, 0x1, 0x32314752, 0x8, 0x7ff, 0x1000, 0x3, 0x298, 0x1, 0x8}}, 0x1}) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x81, @none, 0xfff7}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x71}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0xffffffff, 0x37, 0x2, {0x1, @pix={0x0, 0x1, 0x32314752, 0x8, 0x7ff, 0x1000, 0x3, 0x298, 0x1, 0x8}}, 0x1}) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x81, @none, 0xfff7}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) 08:17:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x4, 0x400}) 08:17:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x80000001, 0xffffffff, 0x2002, 0x8, 0xa, 0x2, 0x0, 0x7}}) 08:17:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000080)={0x8, "4d2ac20a2b235f4afa8a558f9af9b77749b5724803a84bd7704d1b5470c14a7a", 0x71a14625749d7f8e, 0x1, 0x756bca7, 0x2, 0x5}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0xe) 08:17:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000080)={0x8, "4d2ac20a2b235f4afa8a558f9af9b77749b5724803a84bd7704d1b5470c14a7a", 0x71a14625749d7f8e, 0x1, 0x756bca7, 0x2, 0x5}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0xe) 08:17:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:20 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000080)={0x8, "4d2ac20a2b235f4afa8a558f9af9b77749b5724803a84bd7704d1b5470c14a7a", 0x71a14625749d7f8e, 0x1, 0x756bca7, 0x2, 0x5}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000080)={0x8, "4d2ac20a2b235f4afa8a558f9af9b77749b5724803a84bd7704d1b5470c14a7a", 0x71a14625749d7f8e, 0x1, 0x756bca7, 0x2, 0x5}) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0xe) (async) 08:17:20 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:20 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (rerun: 32) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x1000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x3ff}) 08:17:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x1000}, 0xe) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x3ff}) 08:17:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x1000}, 0xe) (async, rerun: 32) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) (rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x2, 0x3ff}) 08:17:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f00000001c0)=0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc53}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x505800, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x1}, {0x7, 0x401}, {0x7fff, 0x7}, {0x100, 0x1}, {0x6, 0x7fff}, {0x0, 0x1}]}) 08:17:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x505800, 0x0) (rerun: 64) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x1}, {0x7, 0x401}, {0x7fff, 0x7}, {0x100, 0x1}, {0x6, 0x7fff}, {0x0, 0x1}]}) 08:17:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x4, 0x400}) 08:17:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) socketpair(0x2, 0x2, 0xe6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0xfff) 08:17:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x4, 0x400}) 08:17:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x505800, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x1}, {0x7, 0x401}, {0x7fff, 0x7}, {0x100, 0x1}, {0x6, 0x7fff}, {0x0, 0x1}]}) 08:17:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000180)={0x4, "d04a3d9451a132035d2f1ba939ac23270954c7a000e282fcba341dc83d5d3c43", 0x1, 0x4, 0x3, 0x2, 0x4000000, 0x4}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 08:17:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000003c0)) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4d, @any, 0x3ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "785913"}, 0x6) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x1, {0xffff, 0xfffffffa}, 0x5, 0x1ff}}) r4 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) 08:17:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) socketpair(0x2, 0x2, 0xe6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0xfff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) socketpair(0x2, 0x2, 0xe6, &(0x7f0000000080)) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0xfff) (async) 08:17:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000003c0)) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x4d, @any, 0x3ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "785913"}, 0x6) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x2, @output={0x0, 0x1, {0xffff, 0xfffffffa}, 0x5, 0x1ff}}) r4 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) 08:17:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x100, "626bbf7d77a2d34da4cc80abd98e5b54d44c04eec880824971d738922a9932dd", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r1}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x100000) 08:17:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 08:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:24 executing program 0: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x50, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xfffffffffffffef6) 08:17:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x20200) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) 08:17:24 executing program 0: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x50, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xfffffffffffffef6) 08:17:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) socketpair(0x2, 0x2, 0xe6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0xfff) 08:17:24 executing program 0: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x50, 0x4) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xfffffffffffffef6) 08:17:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0xb, 0x4) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x3, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) 08:17:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x1f, 0x16b000, 0x9d, 0x8, 0x9, 0xfffffe01, 0x3d27, 0xe44, 0xffffffff, 0xff, 0x101, 0x6, 0x400, 0x1, 0x81, 0x3, 0x4, 0xff, 0x9, 0x10000, 0x864, 0x3, 0x101, 0x7, 0x40000000, 0xff, 0x6, 0xb63, 0x0, 0x5, 0x200, 0x8000]}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x2, 0x1}, 0xffffffffffffff25) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @none, 0x1006, 0x1}, 0xe) 08:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x3}, 0xe) 08:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x3}, 0xe) (async) 08:17:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x1f, 0x16b000, 0x9d, 0x8, 0x9, 0xfffffe01, 0x3d27, 0xe44, 0xffffffff, 0xff, 0x101, 0x6, 0x400, 0x1, 0x81, 0x3, 0x4, 0xff, 0x9, 0x10000, 0x864, 0x3, 0x101, 0x7, 0x40000000, 0xff, 0x6, 0xb63, 0x0, 0x5, 0x200, 0x8000]}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x2, 0x1}, 0xffffffffffffff25) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @none, 0x1006, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x1f, 0x16b000, 0x9d, 0x8, 0x9, 0xfffffe01, 0x3d27, 0xe44, 0xffffffff, 0xff, 0x101, 0x6, 0x400, 0x1, 0x81, 0x3, 0x4, 0xff, 0x9, 0x10000, 0x864, 0x3, 0x101, 0x7, 0x40000000, 0xff, 0x6, 0xb63, 0x0, 0x5, 0x200, 0x8000]}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x2, 0x1}, 0xffffffffffffff25) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @none, 0x1006, 0x1}, 0xe) (async) 08:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x3}, 0xe) (async) 08:17:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x1f, 0x16b000, 0x9d, 0x8, 0x9, 0xfffffe01, 0x3d27, 0xe44, 0xffffffff, 0xff, 0x101, 0x6, 0x400, 0x1, 0x81, 0x3, 0x4, 0xff, 0x9, 0x10000, 0x864, 0x3, 0x101, 0x7, 0x40000000, 0xff, 0x6, 0xb63, 0x0, 0x5, 0x200, 0x8000]}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x2, 0x1}, 0xffffffffffffff25) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @none, 0x1006, 0x1}, 0xe) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x80c00) 08:17:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0xff, "0000df"}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x8000000000000001, 0x400041) ioctl$RTC_VL_CLR(r3, 0x7014) 08:17:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x800) ioctl$RTC_WIE_OFF(r1, 0x7010) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x642000, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x4, "b2b02660a1f256fbafe84ca0bf362e1c0c98819ff5dcdc381bfbe728d959cea1", 0x2}) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x18, 0xe, 0xd, 0x9, 0xffffff81, 0x1, 0xb8, 0xffffffffffffffff}) 08:17:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000040)=0x400) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x80c00) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x80c00) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 08:17:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) 08:17:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0xff, "0000df"}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x8000000000000001, 0x400041) ioctl$RTC_VL_CLR(r3, 0x7014) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0xff, "0000df"}, 0x6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) syz_open_dev$rtc(&(0x7f0000000040), 0x8000000000000001, 0x400041) (async) ioctl$RTC_VL_CLR(r3, 0x7014) (async) 08:17:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x800) ioctl$RTC_WIE_OFF(r1, 0x7010) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x642000, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x4, "b2b02660a1f256fbafe84ca0bf362e1c0c98819ff5dcdc381bfbe728d959cea1", 0x2}) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x18, 0xe, 0xd, 0x9, 0xffffff81, 0x1, 0xb8, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x800) (async) ioctl$RTC_WIE_OFF(r1, 0x7010) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x642000, 0x0) (async) pipe2(&(0x7f0000000140), 0x4080) (async) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x4, "b2b02660a1f256fbafe84ca0bf362e1c0c98819ff5dcdc381bfbe728d959cea1", 0x2}) (async) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x18, 0xe, 0xd, 0x9, 0xffffff81, 0x1, 0xb8, 0xffffffffffffffff}) (async) 08:17:26 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000040)=0x400) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:26 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0xff, "0000df"}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x8000000000000001, 0x400041) ioctl$RTC_VL_CLR(r3, 0x7014) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0xff, "0000df"}, 0x6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) syz_open_dev$rtc(&(0x7f0000000040), 0x8000000000000001, 0x400041) (async) ioctl$RTC_VL_CLR(r3, 0x7014) (async) 08:17:26 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x800) ioctl$RTC_WIE_OFF(r1, 0x7010) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x642000, 0x0) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x4, "b2b02660a1f256fbafe84ca0bf362e1c0c98819ff5dcdc381bfbe728d959cea1", 0x2}) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x18, 0xe, 0xd, 0x9, 0xffffff81, 0x1, 0xb8, 0xffffffffffffffff}) 08:17:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x525d00, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x81800) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x100000) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000040)=0x400) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:27 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (rerun: 64) 08:17:27 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x402c542b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0xa, 0x8001, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00bd7000ffdbdf2544000000080003000000", @ANYRES32=r8, @ANYBLOB="0c009900ff0300002a0000000400bf0004000801c4005a807400018014000300ff0f030000003ef70800ff0f03000b00140005003f00001001011f000800fffe020005000500060001000000140005000900090002000000800003000800050005000600010000000500040002000000140005002a0d0101090001000300df000104070005000400020000000c00038005000700000000004000018005000700010000000c00020010373d080a3d5450260002000815383a0e353b491c350e065702530c4113430b2e28294a3f27102718362911033b0000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x525d00, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x81800) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x100000) 08:17:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) 08:17:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000), 0x4880) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0x400) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7a0d, 0x1}, 0xe) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x901000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) 08:17:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x402c542b, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x9, 0xa, 0x8001, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00bd7000ffdbdf2544000000080003000000", @ANYRES32=r8, @ANYBLOB="0c009900ff0300002a0000000400bf0004000801c4005a807400018014000300ff0f030000003ef70800ff0f03000b00140005003f00001001011f000800fffe020005000500060001000000140005000900090002000000800003000800050005000600010000000500040002000000140005002a0d0101090001000300df000104070005000400020000000c00038005000700000000004000018005000700010000000c00020010373d080a3d5450260002000815383a0e353b491c350e065702530c4113430b2e28294a3f27102718362911033b0000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) 08:17:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x525d00, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x81800) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x100000) 08:17:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x402c542b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0xa, 0x8001, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00bd7000ffdbdf2544000000080003000000", @ANYRES32=r8, @ANYBLOB="0c009900ff0300002a0000000400bf0004000801c4005a807400018014000300ff0f030000003ef70800ff0f03000b00140005003f00001001011f000800fffe020005000500060001000000140005000900090002000000800003000800050005000600010000000500040002000000140005002a0d0101090001000300df000104070005000400020000000c00038005000700000000004000018005000700010000000c00020010373d080a3d5450260002000815383a0e353b491c350e065702530c4113430b2e28294a3f27102718362911033b0000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) 08:17:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000), 0x4880) getpid() bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7a0d, 0x1}, 0xe) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x901000) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) (rerun: 64) 08:17:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x402c542b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x9, 0xa, 0x8001, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00bd7000ffdbdf2544000000080003000000", @ANYRES32=r8, @ANYBLOB="0c009900ff0300002a0000000400bf0004000801c4005a807400018014000300ff0f030000003ef70800ff0f03000b00140005003f00001001011f000800fffe020005000500060001000000140005000900090002000000800003000800050005000600010000000500040002000000140005002a0d0101090001000300df000104070005000400020000000c00038005000700000000004000018005000700010000000c00020010373d080a3d5450260002000815383a0e353b491c350e065702530c4113430b2e28294a3f27102718362911033b0000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x4c800) 08:17:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000080)=0x2b, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x40c00) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4c, 0x7b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x24}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10001}, @NL80211_ATTR_PMKID={0x14, 0x55, "f0eb10b259d1ac207112b752c44e85fc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d2d1921ebbd6e75113688bc64ad3d3e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xfffffd4b) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000080)=0x2b, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) r2 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x40c00) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4c, 0x7b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x24}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10001}, @NL80211_ATTR_PMKID={0x14, 0x55, "f0eb10b259d1ac207112b752c44e85fc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d2d1921ebbd6e75113688bc64ad3d3e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async, rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xfffffd4b) 08:17:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000080)=0x2b, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) r2 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x40c00) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4c, 0x7b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x24}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10001}, @NL80211_ATTR_PMKID={0x14, 0x55, "f0eb10b259d1ac207112b752c44e85fc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d2d1921ebbd6e75113688bc64ad3d3e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1c}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) (rerun: 32) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xfffffd4b) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="eeaa3b24027210345078b11184de53be325ba894101cb6019e890fbde4b2ecafa43f2d1e679cf396a0a8389739374c78cbf6511e2da785f51b7d2ed1fdb7092cd83da88009f156e307ba8b9377f3d88b110048ac351c614de4a5074f4ae2ce984a2c56b2dab8de85ef5c9cbaf620eecd12d8f7be2c", {0x3, 0x9, 0x20303159, 0x7, 0xfffeffff, 0x0, 0x2, 0xfffffff9}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000002c0)={0xa0000000, 0x6, "fba010d9490b0e33ec1308bdcca258e70ec9401ce19408a97ab0c0dbd5151b23", 0x9f, 0x200, 0xd1, 0x7, 0x401, 0x4, 0xd0, 0x6, [0x0, 0x4, 0x7, 0x4]}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0xa4ad3fc17a5269c4, 0x1, {0x4, 0x1, 0x80000000, 0x3}}) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="eeaa3b24027210345078b11184de53be325ba894101cb6019e890fbde4b2ecafa43f2d1e679cf396a0a8389739374c78cbf6511e2da785f51b7d2ed1fdb7092cd83da88009f156e307ba8b9377f3d88b110048ac351c614de4a5074f4ae2ce984a2c56b2dab8de85ef5c9cbaf620eecd12d8f7be2c", {0x3, 0x9, 0x20303159, 0x7, 0xfffeffff, 0x0, 0x2, 0xfffffff9}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000002c0)={0xa0000000, 0x6, "fba010d9490b0e33ec1308bdcca258e70ec9401ce19408a97ab0c0dbd5151b23", 0x9f, 0x200, 0xd1, 0x7, 0x401, 0x4, 0xd0, 0x6, [0x0, 0x4, 0x7, 0x4]}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0xa4ad3fc17a5269c4, 0x1, {0x4, 0x1, 0x80000000, 0x3}}) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="eeaa3b24027210345078b11184de53be325ba894101cb6019e890fbde4b2ecafa43f2d1e679cf396a0a8389739374c78cbf6511e2da785f51b7d2ed1fdb7092cd83da88009f156e307ba8b9377f3d88b110048ac351c614de4a5074f4ae2ce984a2c56b2dab8de85ef5c9cbaf620eecd12d8f7be2c", {0x3, 0x9, 0x20303159, 0x7, 0xfffeffff, 0x0, 0x2, 0xfffffff9}}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000002c0)={0xa0000000, 0x6, "fba010d9490b0e33ec1308bdcca258e70ec9401ce19408a97ab0c0dbd5151b23", 0x9f, 0x200, 0xd1, 0x7, 0x401, 0x4, 0xd0, 0x6, [0x0, 0x4, 0x7, 0x4]}) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0xa4ad3fc17a5269c4, 0x1, {0x4, 0x1, 0x80000000, 0x3}}) (async) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000140)) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) (async) 08:17:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000000), 0x4880) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="eeaa3b24027210345078b11184de53be325ba894101cb6019e890fbde4b2ecafa43f2d1e679cf396a0a8389739374c78cbf6511e2da785f51b7d2ed1fdb7092cd83da88009f156e307ba8b9377f3d88b110048ac351c614de4a5074f4ae2ce984a2c56b2dab8de85ef5c9cbaf620eecd12d8f7be2c", {0x3, 0x9, 0x20303159, 0x7, 0xfffeffff, 0x0, 0x2, 0xfffffff9}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000002c0)={0xa0000000, 0x6, "fba010d9490b0e33ec1308bdcca258e70ec9401ce19408a97ab0c0dbd5151b23", 0x9f, 0x200, 0xd1, 0x7, 0x401, 0x4, 0xd0, 0x6, [0x0, 0x4, 0x7, 0x4]}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0xa4ad3fc17a5269c4, 0x1, {0x4, 0x1, 0x80000000, 0x3}}) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000200)={0x40, 0x20, &(0x7f0000000180)="eeaa3b24027210345078b11184de53be325ba894101cb6019e890fbde4b2ecafa43f2d1e679cf396a0a8389739374c78cbf6511e2da785f51b7d2ed1fdb7092cd83da88009f156e307ba8b9377f3d88b110048ac351c614de4a5074f4ae2ce984a2c56b2dab8de85ef5c9cbaf620eecd12d8f7be2c", {0x3, 0x9, 0x20303159, 0x7, 0xfffeffff, 0x0, 0x2, 0xfffffff9}}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000002c0)={0xa0000000, 0x6, "fba010d9490b0e33ec1308bdcca258e70ec9401ce19408a97ab0c0dbd5151b23", 0x9f, 0x200, 0xd1, 0x7, 0x401, 0x4, 0xd0, 0x6, [0x0, 0x4, 0x7, 0x4]}) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0xa4ad3fc17a5269c4, 0x1, {0x4, 0x1, 0x80000000, 0x3}}) (async) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000140)) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) (async) 08:17:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7a0d, 0x1}, 0xe) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x901000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7a0d, 0x1}, 0xe) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x7ff, 0x901000) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r3}) (async) 08:17:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:17:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:30 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) 08:17:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x40041) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x91c) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) socketpair(0x1d, 0x2, 0x4, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfffe, 0x2}, 0xe) [ 2946.108229] can_create: 26 callbacks suppressed [ 2946.108273] can: request_module (can-proto-4) failed. 08:17:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:17:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 08:17:31 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:31 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfffe, 0x2}, 0xe) 08:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:17:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) 08:17:31 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:31 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x54, 0x40, &(0x7f0000000140)="7a64081df34d57a0785d93bcbb53730ec58b3264e3d161d7ce55245ddf950b1620b1407b79247fdf49936d71d4d27eadd6f3b28e43447490be18fc656b6d80832e281a37df33ffcad1b42002f4867a01b83ae9921186328a57e5901614a4ec8fa42886433b967f3aae5eb43bae463eff030246d4e81146b96fdf8f039ea2ea228d2f392ad208729bc4fa73", {0x1, 0x400, 0x30383653, 0x3, 0x3f, 0x3, 0x8, 0xfffffff9}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x4, {0x1, 0x8, 0x6, 0x1ff}}) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000080)) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:17:32 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 08:17:32 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfffe, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfffe, 0x2}, 0xe) (async) 08:17:32 executing program 3: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) 08:17:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6f, 0x40, 0x10000, 0x9, 0x3, "04d04d979c134d7f6397806a864799ec0a5a14", 0x6, 0xffffffff}) 08:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 1: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:33 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) 08:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) 08:17:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6f, 0x40, 0x10000, 0x9, 0x3, "04d04d979c134d7f6397806a864799ec0a5a14", 0x6, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6f, 0x40, 0x10000, 0x9, 0x3, "04d04d979c134d7f6397806a864799ec0a5a14", 0x6, 0xffffffff}) (async) 08:17:33 executing program 1: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:33 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 1: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 08:17:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6f, 0x40, 0x10000, 0x9, 0x3, "04d04d979c134d7f6397806a864799ec0a5a14", 0x6, 0xffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x6f, 0x40, 0x10000, 0x9, 0x3, "04d04d979c134d7f6397806a864799ec0a5a14", 0x6, 0xffffffff}) (async) 08:17:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000240)={0x0, 0x7f, 0x401, '\x00', &(0x7f0000000200)=0x4}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x1000, @any, 0x6}, 0xe) 08:17:34 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 32) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (rerun: 32) 08:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) 08:17:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:34 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:34 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) 08:17:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:17:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:35 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async, rerun: 64) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (rerun: 64) 08:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "4e970a"}, 0x6) 08:17:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:17:35 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x400}, 0xe) 08:17:36 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) 08:17:36 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "4e970a"}, 0x6) 08:17:36 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:36 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x0, {0x7f00, 0x3}, 0x3, 0x9b}}) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:36 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x1, "4e970a"}, 0x6) 08:17:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe6}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:17:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getrusage(0x0, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0xc0800) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) 08:17:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:37 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x0, {0x7f00, 0x3}, 0x3, 0x9b}}) 08:17:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:37 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x5) 08:17:38 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe6}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe6}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe6}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:17:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, 0x0, 0x0) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x0, {0x7f00, 0x3}, 0x3, 0x9b}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x0, {0x7f00, 0x3}, 0x3, 0x9b}}) (async) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, 0x0, 0x0) 08:17:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x5) 08:17:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xe6}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:17:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:17:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000140)={0x2, @output={0x0, 0x0, {0x7f00, 0x3}, 0x3, 0x9b}}) 08:17:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe) 08:17:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe) 08:17:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000080), 0x80800) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x5) (async) 08:17:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x800, '\x00', &(0x7f0000000080)=0x6}) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$nfc_raw(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1}, 0x10) r3 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f00000001c0)) 08:17:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe) 08:17:40 executing program 1: socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:40 executing program 3: socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:17:40 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:40 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none}, 0xe) 08:17:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xffff, 0x80, 0x9, 0x4, 0x40, 0x1, 0x7}, 0xc) 08:17:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x800, '\x00', &(0x7f0000000080)=0x6}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$nfc_raw(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1}, 0x10) (async) r3 = timerfd_create(0x9, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f00000001c0)) 08:17:41 executing program 1: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400), 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400), 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xffff, 0x80, 0x9, 0x4, 0x40, 0x1, 0x7}, 0xc) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xffff, 0x80, 0x9, 0x4, 0x40, 0x1, 0x7}, 0xc) 08:17:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x800, '\x00', &(0x7f0000000080)=0x6}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$nfc_raw(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1}, 0x10) (async) r3 = timerfd_create(0x9, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f00000001c0)) 08:17:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x800, '\x00', &(0x7f0000000080)=0x6}) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$nfc_raw(r2, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1}, 0x10) r3 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f00000001c0)) 08:17:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) [ 2957.092683] Bluetooth: hci5: command 0x0405 tx timeout 08:17:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000140)=@mmap={0x8, 0xa, 0x4, 0x0, 0x7b5fca0b, {}, {0x1, 0x2, 0xaf, 0x81, 0x4, 0x1e, "a0ec9e1f"}, 0x8, 0x1, {}, 0x5890dcd4, 0x0, r2}) r4 = accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000001c0)={0x1, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000040)={0x40, "87907d"}, 0x6) 08:17:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (fail_nth: 1) 08:17:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "b10c1741b4b58d2e20a9c431060d914dcab7aff0392a47ffa048e493ea6f6eeb", 0x2, 0x40, 0x4, 0x1700, 0x20000, 0x2}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:42 executing program 3: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) 08:17:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x102) syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x195c02) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x103003, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) 08:17:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (fail_nth: 1) 08:17:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (fail_nth: 1) 08:17:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0x2000000e) 08:17:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:42 executing program 3: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x52, 0x2}, 0xe) 08:17:42 executing program 3: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x52, 0x2}, 0xe) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x52, 0x2}, 0xe) (async) 08:17:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000140)=@mmap={0x8, 0xa, 0x4, 0x0, 0x7b5fca0b, {}, {0x1, 0x2, 0xaf, 0x81, 0x4, 0x1e, "a0ec9e1f"}, 0x8, 0x1, {}, 0x5890dcd4, 0x0, r2}) r4 = accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000001c0)={0x1, 0x1}) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000040)={0x40, "87907d"}, 0x6) 08:17:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "b10c1741b4b58d2e20a9c431060d914dcab7aff0392a47ffa048e493ea6f6eeb", 0x2, 0x40, 0x4, 0x1700, 0x20000, 0x2}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "b10c1741b4b58d2e20a9c431060d914dcab7aff0392a47ffa048e493ea6f6eeb", 0x2, 0x40, 0x4, 0x1700, 0x20000, 0x2}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:43 executing program 3: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x52, 0x2}, 0xe) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x52, 0x2}, 0xe) (async) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) [ 2958.695875] FAULT_INJECTION: forcing a failure. [ 2958.695875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2958.707912] CPU: 0 PID: 10821 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2958.715890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2958.725265] Call Trace: [ 2958.727846] dump_stack+0x1fc/0x2ef [ 2958.731469] should_fail.cold+0xa/0xf [ 2958.735265] ? setup_fault_attr+0x200/0x200 [ 2958.739571] ? free_one_page+0x12b/0x10b0 [ 2958.743707] __alloc_pages_nodemask+0x239/0x2890 [ 2958.748466] ? __lock_acquire+0x6de/0x3ff0 [ 2958.752711] ? lock_downgrade+0x720/0x720 [ 2958.756857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2958.761714] ? mark_held_locks+0xf0/0xf0 [ 2958.765770] ? free_unref_page_list+0x59a/0x7b0 [ 2958.770450] ? unmap_page_range+0x1616/0x2c50 [ 2958.774957] alloc_pages_current+0x193/0x2a0 [ 2958.779374] __get_free_pages+0x8/0x40 [ 2958.783273] __tlb_remove_page_size+0x2a2/0x470 [ 2958.787975] unmap_page_range+0x14e7/0x2c50 [ 2958.792315] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 2958.796801] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2958.801906] ? uprobe_munmap+0x2d/0x4d0 [ 2958.805880] unmap_single_vma+0x198/0x300 [ 2958.810031] unmap_vmas+0xa9/0x180 [ 2958.813565] exit_mmap+0x2b9/0x530 [ 2958.817087] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2958.822378] ? __khugepaged_exit+0x2a6/0x3e0 [ 2958.826810] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2958.831817] ? kmem_cache_free+0x226/0x260 [ 2958.836039] ? __khugepaged_exit+0x2c7/0x3e0 [ 2958.840446] mmput+0x14e/0x4a0 [ 2958.843642] do_exit+0xaec/0x2be0 [ 2958.847090] ? task_work_run+0x11c/0x1c0 [ 2958.851149] ? mm_update_next_owner+0x650/0x650 [ 2958.855814] ? get_signal+0x388/0x1f70 [ 2958.859698] ? lock_downgrade+0x720/0x720 [ 2958.863836] ? lock_acquire+0x170/0x3c0 [ 2958.867809] do_group_exit+0x125/0x310 [ 2958.871702] get_signal+0x3f2/0x1f70 [ 2958.875549] ? __local_bh_enable_ip+0x159/0x270 [ 2958.880228] do_signal+0x8f/0x1670 [ 2958.883773] ? kick_process+0xe4/0x170 [ 2958.887647] ? setup_sigcontext+0x820/0x820 [ 2958.891961] ? l2cap_sock_accept+0x550/0x550 [ 2958.896354] ? fput+0xf2/0x190 [ 2958.899547] ? __ia32_sys_accept+0xb0/0xb0 [ 2958.903780] ? wait_for_completion_io+0x10/0x10 [ 2958.908451] ? vfs_write+0x393/0x540 [ 2958.912159] ? fput+0x2b/0x190 [ 2958.915337] ? ksys_write+0x1c8/0x2a0 [ 2958.919142] ? exit_to_usermode_loop+0x36/0x2a0 [ 2958.923825] exit_to_usermode_loop+0x204/0x2a0 [ 2958.928419] do_syscall_64+0x538/0x620 [ 2958.932303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2958.937475] RIP: 0033:0x7fcf09c27279 [ 2958.941178] Code: Bad RIP value. 08:17:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) [ 2958.944530] RSP: 002b:00007fcf0857b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2958.952223] RAX: fffffffffffffffc RBX: 00007fcf09d3a050 RCX: 00007fcf09c27279 [ 2958.959492] RDX: 000000000000000e RSI: 0000000020000040 RDI: 0000000000000004 [ 2958.966755] RBP: 00007fcf0857b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.975319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2958.982577] R13: 00007ffeeb5b453f R14: 00007fcf0857b300 R15: 0000000000022000 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "90c75d33b48d51ba9c83a7f3908230984082145e0082e5f0d1a8d2807e9afd24"}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "90c75d33b48d51ba9c83a7f3908230984082145e0082e5f0d1a8d2807e9afd24"}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 32) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) (rerun: 32) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "90c75d33b48d51ba9c83a7f3908230984082145e0082e5f0d1a8d2807e9afd24"}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "90c75d33b48d51ba9c83a7f3908230984082145e0082e5f0d1a8d2807e9afd24"}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) (async) 08:17:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000140)=@mmap={0x8, 0xa, 0x4, 0x0, 0x7b5fca0b, {}, {0x1, 0x2, 0xaf, 0x81, 0x4, 0x1e, "a0ec9e1f"}, 0x8, 0x1, {}, 0x5890dcd4, 0x0, r2}) (async, rerun: 64) r4 = accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) (async, rerun: 64) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000001c0)={0x1, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000040)={0x40, "87907d"}, 0x6) 08:17:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "b10c1741b4b58d2e20a9c431060d914dcab7aff0392a47ffa048e493ea6f6eeb", 0x2, 0x40, 0x4, 0x1700, 0x20000, 0x2}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x1, "b10c1741b4b58d2e20a9c431060d914dcab7aff0392a47ffa048e493ea6f6eeb", 0x2, 0x40, 0x4, 0x1700, 0x20000, 0x2}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) socketpair(0x11, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x7f, "4ee034"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) socketpair(0x11, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x7f, "4ee034"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) socketpair(0x11, 0x0, 0x1, &(0x7f0000000040)) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x7f, "4ee034"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) socketpair(0x11, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x7f, "4ee034"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:44 executing program 3: r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ae", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000280), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000001280)={0x0, r0, r1}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)=""/182, 0xb6, &(0x7f0000000200)={&(0x7f0000000140)={'cmac-aes-ce\x00'}, &(0x7f0000000180)="5c5a5172725fac34aba1e0bbce15ce43da07ecea50f76e574058326be75e1271633ea6e87140d32307a87bbf90bee54e3b44dc670460a0b40f6ccb6fde5cb340abd61b0a42715b04b828bb62517509259c3db2b29c56358401f86522b48bc726b3fd6b", 0x63}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0xa, 0x3, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @any, 0x4000}, 0xe) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair(0x10, 0x800, 0x1, &(0x7f00000002c0)={0xffffffffffffffff}) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) 08:17:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) memfd_create(&(0x7f0000000080)='/\x00', 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 08:17:44 executing program 3: r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ae", 0x1, 0xfffffffffffffffd) (async) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000280), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000001280)={0x0, r0, r1}, 0x0, 0x0, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)=""/182, 0xb6, &(0x7f0000000200)={&(0x7f0000000140)={'cmac-aes-ce\x00'}, &(0x7f0000000180)="5c5a5172725fac34aba1e0bbce15ce43da07ecea50f76e574058326be75e1271633ea6e87140d32307a87bbf90bee54e3b44dc670460a0b40f6ccb6fde5cb340abd61b0a42715b04b828bb62517509259c3db2b29c56358401f86522b48bc726b3fd6b", 0x63}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socketpair(0xa, 0x3, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @any, 0x4000}, 0xe) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async) socketpair(0x10, 0x800, 0x1, &(0x7f00000002c0)={0xffffffffffffffff}) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) 08:17:44 executing program 3: r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ae", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000280), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000001280)={0x0, r0, r1}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)=""/182, 0xb6, &(0x7f0000000200)={&(0x7f0000000140)={'cmac-aes-ce\x00'}, &(0x7f0000000180)="5c5a5172725fac34aba1e0bbce15ce43da07ecea50f76e574058326be75e1271633ea6e87140d32307a87bbf90bee54e3b44dc670460a0b40f6ccb6fde5cb340abd61b0a42715b04b828bb62517509259c3db2b29c56358401f86522b48bc726b3fd6b", 0x63}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0xa, 0x3, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @any, 0x4000}, 0xe) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair(0x10, 0x800, 0x1, &(0x7f00000002c0)={0xffffffffffffffff}) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="ae", 0x1, 0xfffffffffffffffd) (async) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000280), 0x0, 0xfffffffffffffffa) (async) keyctl$dh_compute(0x17, &(0x7f0000001280)={0x0, r0, r1}, 0x0, 0x0, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)=""/182, 0xb6, &(0x7f0000000200)={&(0x7f0000000140)={'cmac-aes-ce\x00'}, &(0x7f0000000180)="5c5a5172725fac34aba1e0bbce15ce43da07ecea50f76e574058326be75e1271633ea6e87140d32307a87bbf90bee54e3b44dc670460a0b40f6ccb6fde5cb340abd61b0a42715b04b828bb62517509259c3db2b29c56358401f86522b48bc726b3fd6b", 0x63}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socketpair(0xa, 0x3, 0x7fff, &(0x7f0000000040)) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @any, 0x4000}, 0xe) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async) socketpair(0x10, 0x800, 0x1, &(0x7f00000002c0)) (async) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) (async) 08:17:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @any, 0xfffe, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) 08:17:44 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000100)={0x7, "435a017d53f1dba48c61a2037b1b4629c41f504a8fa14b198bc96676dd1d5731", 0x1, 0x10000, 0x4, 0x10, 0x21, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 08:17:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2}, 0xe) [ 2960.050495] ieee802154 phy0 wpan0: encryption failed: -22 [ 2960.056090] ieee802154 phy1 wpan1: encryption failed: -22 08:17:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffd, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xff}, 0xe) 08:17:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) (async, rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @any, 0xfffe, 0x2}, 0xe) (rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) 08:17:44 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000100)={0x7, "435a017d53f1dba48c61a2037b1b4629c41f504a8fa14b198bc96676dd1d5731", 0x1, 0x10000, 0x4, 0x10, 0x21, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000100)={0x7, "435a017d53f1dba48c61a2037b1b4629c41f504a8fa14b198bc96676dd1d5731", 0x1, 0x10000, 0x4, 0x10, 0x21, 0x2}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) 08:17:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) (async, rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @any, 0xfffe, 0x2}, 0xe) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) 08:17:44 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000100)={0x7, "435a017d53f1dba48c61a2037b1b4629c41f504a8fa14b198bc96676dd1d5731", 0x1, 0x10000, 0x4, 0x10, 0x21, 0x2}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 08:17:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2}, 0xe) 08:17:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) memfd_create(&(0x7f0000000080)='/\x00', 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) memfd_create(&(0x7f0000000080)='/\x00', 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) 08:17:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffd, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) accept$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xff}, 0xe) 08:17:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1000}, 0xe) 08:17:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1000}, 0xe) 08:17:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffd, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) accept$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xff}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0xfffd, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) accept$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xff}, 0xe) (async) 08:17:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1000}, 0xe) 08:17:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) memfd_create(&(0x7f0000000080)='/\x00', 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 08:17:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x81000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x2) 08:17:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3}, 0xe) 08:17:46 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xffff, "a7559c"}, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x400, 0x2}, 0xe) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x2}, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180)={0x0, 0x3}, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000080)) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r6 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x2}, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180)={0x0, 0x3}, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000080)) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r6 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x2}, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180)={0x0, 0x3}, 0x2) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) (async) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r6) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x2}, 0x2) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000180)={0x0, 0x3}, 0x2) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000080)) (async) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r6 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r6) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2}, 0xe) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RTC_WIE_ON(r1, 0x700f) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffffffffffffe5) 08:17:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x848, 0x2}, 0xe) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_WIE_OFF(r2, 0x7010) (async) ioctl$RTC_WIE_ON(r1, 0x700f) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffffffffffffe5) 08:17:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x81000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x2) 08:17:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_WIE_OFF(r2, 0x7010) (async) ioctl$RTC_WIE_ON(r1, 0x700f) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffffffffffffe5) 08:17:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4}, 0xe) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x848, 0x2}, 0xe) 08:17:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000440)={0x100000000, 0x105, "efc726c248eb4664cfd39d808a7bb039f970209253f6066901d17c4e9b17cc1c", 0x3, 0x64b9, 0xc223, 0xfffffffff91ff87d, 0x6, 0x1000, 0x8, 0xa3, [0x9e, 0x10, 0x1ff, 0x80000001]}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x10000, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x7, 0xa, 0x4, 0x20, 0x6, {0x77359400}, {0x2, 0x0, 0x8, 0x4, 0x7, 0x0, "fc07f788"}, 0x8000, 0x3, {&(0x7f0000000040)=[{0x1, 0x6, {0x9}, 0x2}, {0x0, 0x81, {0x286}, 0x6}]}, 0x5d, 0x0, r1}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:17:47 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xffff, "a7559c"}, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x400, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xffff, "a7559c"}, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x400, 0x2}, 0xe) (async) 08:17:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000440)={0x100000000, 0x105, "efc726c248eb4664cfd39d808a7bb039f970209253f6066901d17c4e9b17cc1c", 0x3, 0x64b9, 0xc223, 0xfffffffff91ff87d, 0x6, 0x1000, 0x8, 0xa3, [0x9e, 0x10, 0x1ff, 0x80000001]}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x10000, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x7, 0xa, 0x4, 0x20, 0x6, {0x77359400}, {0x2, 0x0, 0x8, 0x4, 0x7, 0x0, "fc07f788"}, 0x8000, 0x3, {&(0x7f0000000040)=[{0x1, 0x6, {0x9}, 0x2}, {0x0, 0x81, {0x286}, 0x6}]}, 0x5d, 0x0, r1}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x848, 0x2}, 0xe) 08:17:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000440)={0x100000000, 0x105, "efc726c248eb4664cfd39d808a7bb039f970209253f6066901d17c4e9b17cc1c", 0x3, 0x64b9, 0xc223, 0xfffffffff91ff87d, 0x6, 0x1000, 0x8, 0xa3, [0x9e, 0x10, 0x1ff, 0x80000001]}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0x10000, 0x0, '\x00', {0x0, @reserved}}) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x7, 0xa, 0x4, 0x20, 0x6, {0x77359400}, {0x2, 0x0, 0x8, 0x4, 0x7, 0x0, "fc07f788"}, 0x8000, 0x3, {&(0x7f0000000040)=[{0x1, 0x6, {0x9}, 0x2}, {0x0, 0x81, {0x286}, 0x6}]}, 0x5d, 0x0, r1}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x81000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000080), 0x81000) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000000c0)=0x2) (async) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:47 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x401, 0xc, 0x4, 0x400, 0x129, {}, {0x1, 0xc, 0x0, 0x4, 0xc, 0x5, "237ce8e3"}, 0x0, 0x2, {&(0x7f0000000180)=[{0x401, 0xfffffffe, {&(0x7f0000000100)}, 0x3}, {0xfffff7bf, 0x101, {&(0x7f0000000140)}}]}, 0x6, 0x0, r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8}, 0xe) 08:17:47 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x401, 0xc, 0x4, 0x400, 0x129, {}, {0x1, 0xc, 0x0, 0x4, 0xc, 0x5, "237ce8e3"}, 0x0, 0x2, {&(0x7f0000000180)=[{0x401, 0xfffffffe, {&(0x7f0000000100)}, 0x3}, {0xfffff7bf, 0x101, {&(0x7f0000000140)}}]}, 0x6, 0x0, r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0xfffc}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:47 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xffff, "a7559c"}, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x400, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xffff, "a7559c"}, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x80, @none, 0x400, 0x2}, 0xe) (async) 08:17:47 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x401, 0xc, 0x4, 0x400, 0x129, {}, {0x1, 0xc, 0x0, 0x4, 0xc, 0x5, "237ce8e3"}, 0x0, 0x2, {&(0x7f0000000180)=[{0x401, 0xfffffffe, {&(0x7f0000000100)}, 0x3}, {0xfffff7bf, 0x101, {&(0x7f0000000140)}}]}, 0x6, 0x0, r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) pipe2(&(0x7f0000000200), 0x80000) (async) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_userptr={0x401, 0xc, 0x4, 0x400, 0x129, {}, {0x1, 0xc, 0x0, 0x4, 0xc, 0x5, "237ce8e3"}, 0x0, 0x2, {&(0x7f0000000180)=[{0x401, 0xfffffffe, {&(0x7f0000000100)}, 0x3}, {0xfffff7bf, 0x101, {&(0x7f0000000140)}}]}, 0x6, 0x0, r1}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) 08:17:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfa9e, @any, 0x6}, 0xe) r3 = accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x100000) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0)=0x19, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x2f, 0x4) 08:17:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) socketpair(0x28, 0x800, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x100000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfa9e, @any, 0x6}, 0xe) r3 = accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x100000) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0)=0x19, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x2f, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000240), 0x800) (async) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfa9e, @any, 0x6}, 0xe) (async) accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x100000) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0)=0x19, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x2f, 0x4) (async) 08:17:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) socketpair(0x28, 0x800, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x100000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) socketpair(0x28, 0x800, 0x7, &(0x7f0000000080)) (async) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x100000) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:48 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000001000000000000570911595aef2b663767098100a500", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0c009900020000007f0000000600fd000300000008001f01000040050600fd00030e000008001f015400000014005500af41ae119b5b51ef8de81c1e568fd85b"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) 08:17:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfa9e, @any, 0x6}, 0xe) r3 = accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x100000) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000001c0)=0x19, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200)=0x2f, 0x4) [ 2963.772668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:17:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x300}, 0xe) 08:17:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) socketpair(0x28, 0x800, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x100000) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x1, 0x1}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 08:17:48 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x9, "3d9a4e"}, 0x6) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) 08:17:48 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x9, "3d9a4e"}, 0x6) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x9, "3d9a4e"}, 0x6) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) (async) 08:17:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:48 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x9, "3d9a4e"}, 0x6) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x9, "3d9a4e"}, 0x6) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) (async) 08:17:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0x2000004e) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) 08:17:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x8012, 0xf000, 0x66, 0x85, 0x3d, 0x2}, 0x2) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) 08:17:49 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000001000000000000570911595aef2b663767098100a500", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0c009900020000007f0000000600fd000300000008001f01000040050600fd00030e000008001f015400000014005500af41ae119b5b51ef8de81c1e568fd85b"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000001000000000000570911595aef2b663767098100a500", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0c009900020000007f0000000600fd000300000008001f01000040050600fd00030e000008001f015400000014005500af41ae119b5b51ef8de81c1e568fd85b"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) (async) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) [ 2964.619868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2964.684556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:17:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="42c3498efc53d0ce"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x200, 0xff, 0x3c0, 0x74, 0x4d, 0x22bc, 0x14, 0x3}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x1, 0x1}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x1, 0x1}, 0xe) (async) pipe2(&(0x7f0000000080), 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) 08:17:49 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000001000000000000570911595aef2b663767098100a500", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0c009900020000007f0000000600fd000300000008001f01000040050600fd00030e000008001f015400000014005500af41ae119b5b51ef8de81c1e568fd85b"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="42c3498efc53d0ce"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x200, 0xff, 0x3c0, 0x74, 0x4d, 0x22bc, 0x14, 0x3}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="42c3498efc53d0ce"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x200, 0xff, 0x3c0, 0x74, 0x4d, 0x22bc, 0x14, 0x3}}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="42c3498efc53d0ce"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x200, 0xff, 0x3c0, 0x74, 0x4d, 0x22bc, 0x14, 0x3}}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x46, 0x4) [ 2965.156579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:17:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000180)) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x46, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x46, 0x4) (async) 08:17:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x8012, 0xf000, 0x66, 0x85, 0x3d, 0x2}, 0x2) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x46, 0x4) 08:17:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfff, 0x3f, 0x200, 0xb7, 0x20, 0xff, 0x81}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfff, 0x3f, 0x200, 0xb7, 0x20, 0xff, 0x81}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2}, 0xe) 08:17:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x1, 0x1}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x1, 0x1}, 0xe) (async) pipe2(&(0x7f0000000080), 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) 08:17:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x20}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfff, 0x3f, 0x200, 0xb7, 0x20, 0xff, 0x81}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000080)=0x2}) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000080)=0x2}) 08:17:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) (async) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000180)) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000080)=0x2}) 08:17:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280), &(0x7f0000000300)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x8012, 0xf000, 0x66, 0x85, 0x3d, 0x2}, 0x2) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x7, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x2, &(0x7f00000002c0)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xda9, "5aeb35"}, 0x6) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0xb, 0x5ef, 0x6, 0x4800}) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x7, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async, rerun: 32) r2 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x2, &(0x7f00000002c0)) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xda9, "5aeb35"}, 0x6) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0xb, 0x5ef, 0x6, 0x4800}) 08:17:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x7, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r2 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x2, &(0x7f00000002c0)) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xda9, "5aeb35"}, 0x6) (async, rerun: 32) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0xb, 0x5ef, 0x6, 0x4800}) 08:17:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xe) 08:17:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85080) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1000, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x20}, 0x2) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85080) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1000, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85080) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1000, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) (async) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000180)) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) 08:17:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x1, "5d05b9"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x0, "a28622"}, 0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x400, 0x1}, 0xe) 08:17:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x1, "5d05b9"}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x0, "a28622"}, 0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x400, 0x1}, 0xe) 08:17:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x400, 0x1}, 0xe) 08:17:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) 08:17:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x1, "5d05b9"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x0, "a28622"}, 0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x1, "5d05b9"}, 0x6) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x0, "a28622"}, 0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x20}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x20}, 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:52 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x1000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3fc, 0x9, 0x0, 0x8, 0x81, 0x0, 0x495, 0x10001, 0xe78e, 0x2, 0xfffffffd, 0x63acad12, 0x3, 0x5, 0x5, 0x20, 0x802, 0x5, 0x7, 0x6242, 0x8, 0x2, 0x3, 0x0, 0x10000, 0x6, 0x8001, 0x2, 0x800000, 0x5, 0xcde2]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0xcf, 0x0, '\x00', {0x0, @reserved}}) 08:17:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x2, "b6e84c"}, 0x6) 08:17:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xff}, 0xe) 08:17:52 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x1000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3fc, 0x9, 0x0, 0x8, 0x81, 0x0, 0x495, 0x10001, 0xe78e, 0x2, 0xfffffffd, 0x63acad12, 0x3, 0x5, 0x5, 0x20, 0x802, 0x5, 0x7, 0x6242, 0x8, 0x2, 0x3, 0x0, 0x10000, 0x6, 0x8001, 0x2, 0x800000, 0x5, 0xcde2]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0xcf, 0x0, '\x00', {0x0, @reserved}}) pipe2(&(0x7f0000000080), 0x1000) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3fc, 0x9, 0x0, 0x8, 0x81, 0x0, 0x495, 0x10001, 0xe78e, 0x2, 0xfffffffd, 0x63acad12, 0x3, 0x5, 0x5, 0x20, 0x802, 0x5, 0x7, 0x6242, 0x8, 0x2, 0x3, 0x0, 0x10000, 0x6, 0x8001, 0x2, 0x800000, 0x5, 0xcde2]}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (async) ioctl$RTC_UIE_ON(r2, 0x7003) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0xcf, 0x0, '\x00', {0x0, @reserved}}) (async) 08:17:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x2, "b6e84c"}, 0x6) 08:17:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x4, 0x1}, 0xe) 08:17:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x2, "b6e84c"}, 0x6) 08:17:52 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x1000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x3fc, 0x9, 0x0, 0x8, 0x81, 0x0, 0x495, 0x10001, 0xe78e, 0x2, 0xfffffffd, 0x63acad12, 0x3, 0x5, 0x5, 0x20, 0x802, 0x5, 0x7, 0x6242, 0x8, 0x2, 0x3, 0x0, 0x10000, 0x6, 0x8001, 0x2, 0x800000, 0x5, 0xcde2]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0xcf, 0x0, '\x00', {0x0, @reserved}}) 08:17:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8}, 0xe) 08:17:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socket$igmp(0x2, 0x3, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x1, @raw_data="7038b3b5630af50e3dfa44ff4d4829c57a9dcd9ccbae9d398d5f014fae75748b0cbd25ffe91324d9a5ac961f801b320789ec7c044fe6661b91586534127a529fa459f038077e77e578c44f89da6f2e3ce81a5873efbe5c2f7861e4d1f94301dc6dea0fd6cef6ceae811b6c66462967da6fa54e812ea590659bd0c15add3a1d83e8381f29275472ad35539d87d42de9a7d7924d872879e7358ddbf220c227dbcecbcfcc5a9a22e9ad2ee1a9e85104b1e450648590074e850335df114cd53f9911fabe1cf85d5a7630"}}) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x1}, 0xe) 08:17:53 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0xee, 0x1f, &(0x7f0000000380)="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"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:53 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0xee, 0x1f, &(0x7f0000000380)="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"}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:53 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0xee, 0x1f, &(0x7f0000000380)="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"}) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xff}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xff}, 0xe) (async) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x7}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) 08:17:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x4, 0x1}, 0xe) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x7}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x7}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) (async) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x7}, 0xe) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000040)) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:17:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x300}, 0xe) 08:17:53 executing program 4: socketpair(0xd3a1d6edec03cfed, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x401, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9f0903, 0xffff, '\x00', @string=&(0x7f0000000140)=0x5b}}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0xc20, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x970, @any, 0x1, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$RTC_PIE_OFF(r1, 0x7006) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x8, "419b6d"}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000200)=0x1) 08:17:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x1, @raw_data="7038b3b5630af50e3dfa44ff4d4829c57a9dcd9ccbae9d398d5f014fae75748b0cbd25ffe91324d9a5ac961f801b320789ec7c044fe6661b91586534127a529fa459f038077e77e578c44f89da6f2e3ce81a5873efbe5c2f7861e4d1f94301dc6dea0fd6cef6ceae811b6c66462967da6fa54e812ea590659bd0c15add3a1d83e8381f29275472ad35539d87d42de9a7d7924d872879e7358ddbf220c227dbcecbcfcc5a9a22e9ad2ee1a9e85104b1e450648590074e850335df114cd53f9911fabe1cf85d5a7630"}}) (async) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x1}, 0xe) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:17:53 executing program 4: socketpair(0xd3a1d6edec03cfed, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x401, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9f0903, 0xffff, '\x00', @string=&(0x7f0000000140)=0x5b}}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0xc20, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x970, @any, 0x1, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$RTC_PIE_OFF(r1, 0x7006) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x8, "419b6d"}, 0x6) (async, rerun: 64) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000200)=0x1) 08:17:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:17:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xff}, 0xe) 08:17:54 executing program 4: socketpair(0xd3a1d6edec03cfed, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x401, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9f0903, 0xffff, '\x00', @string=&(0x7f0000000140)=0x5b}}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0xc20, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x970, @any, 0x1, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$RTC_PIE_OFF(r1, 0x7006) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x8, "419b6d"}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000200)=0x1) socketpair(0xd3a1d6edec03cfed, 0x800, 0x3, &(0x7f0000000000)) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x980000, 0x401, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9f0903, 0xffff, '\x00', @string=&(0x7f0000000140)=0x5b}}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0xc20, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x970, @any, 0x1, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$RTC_PIE_OFF(r1, 0x7006) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x8, "419b6d"}, 0x6) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000200)=0x1) (async) 08:17:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x4, 0x1}, 0xe) 08:17:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:54 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xc00, 0xfff, 0x4, 0x9, 0x59, "016d3c1f41547ade809d4dfc7e5fad5eeaffe1", 0x2, 0x6}) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x4}, 0xe) 08:17:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) 08:17:54 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socket$igmp(0x2, 0x3, 0x2) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async, rerun: 64) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x1, @raw_data="7038b3b5630af50e3dfa44ff4d4829c57a9dcd9ccbae9d398d5f014fae75748b0cbd25ffe91324d9a5ac961f801b320789ec7c044fe6661b91586534127a529fa459f038077e77e578c44f89da6f2e3ce81a5873efbe5c2f7861e4d1f94301dc6dea0fd6cef6ceae811b6c66462967da6fa54e812ea590659bd0c15add3a1d83e8381f29275472ad35539d87d42de9a7d7924d872879e7358ddbf220c227dbcecbcfcc5a9a22e9ad2ee1a9e85104b1e450648590074e850335df114cd53f9911fabe1cf85d5a7630"}}) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x1}, 0xe) 08:17:54 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)={0xaf, 0x16, &(0x7f0000000440)="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"}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:54 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)={0xaf, 0x16, &(0x7f0000000440)="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"}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)={0xaf, 0x16, &(0x7f0000000440)="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"}) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:54 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)={0xaf, 0x16, &(0x7f0000000440)="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"}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:55 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) syz_open_pts(r0, 0x12000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:55 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x6, 0x5, 0x4, 0x100000, 0x1, {0x0, 0x2710}, {0x2, 0x0, 0xc1, 0x16, 0x0, 0xff, '\"U#n'}, 0x0, 0x4, {}, 0xbda, 0x0, r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0xa9, "f5b06000f3747e6afebe62d2b595a883076c87471ab06e36aeb0f35f3e0358c8", 0x20, 0xff, 0x3, 0x2, 0x5}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = syz_open_pts(0xffffffffffffffff, 0x200000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 08:17:55 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x6, 0x5, 0x4, 0x100000, 0x1, {0x0, 0x2710}, {0x2, 0x0, 0xc1, 0x16, 0x0, 0xff, '\"U#n'}, 0x0, 0x4, {}, 0xbda, 0x0, r1}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xc00, 0xfff, 0x4, 0x9, 0x59, "016d3c1f41547ade809d4dfc7e5fad5eeaffe1", 0x2, 0x6}) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x4}, 0xe) 08:17:55 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x6, 0x5, 0x4, 0x100000, 0x1, {0x0, 0x2710}, {0x2, 0x0, 0xc1, 0x16, 0x0, 0xff, '\"U#n'}, 0x0, 0x4, {}, 0xbda, 0x0, r1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x6, 0x5, 0x4, 0x100000, 0x1, {0x0, 0x2710}, {0x2, 0x0, 0xc1, 0x16, 0x0, 0xff, '\"U#n'}, 0x0, 0x4, {}, 0xbda, 0x0, r1}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:17:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x5422, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84800) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000280), 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x8, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000240)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0xf63, 0x1, 0x4, 0x40, 0x10001, {}, {0x3, 0x0, 0x2, 0xa6, 0x1, 0x7, "187194c3"}, 0x0, 0x2, {&(0x7f00000000c0)=[{0x109, 0x19d, {&(0x7f0000000040)}, 0x1}, {0x8b, 0x7ff, {&(0x7f0000000080)}, 0x5}]}, 0x5, 0x0, r1}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) 08:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x5422, 0x0) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84800) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000280), 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x8, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000240)) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0xf63, 0x1, 0x4, 0x40, 0x10001, {}, {0x3, 0x0, 0x2, 0xa6, 0x1, 0x7, "187194c3"}, 0x0, 0x2, {&(0x7f00000000c0)=[{0x109, 0x19d, {&(0x7f0000000040)}, 0x1}, {0x8b, 0x7ff, {&(0x7f0000000080)}, 0x5}]}, 0x5, 0x0, r1}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x5422, 0x0) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84800) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000280), 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x8, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000240)) (async, rerun: 32) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0xf63, 0x1, 0x4, 0x40, 0x10001, {}, {0x3, 0x0, 0x2, 0xa6, 0x1, 0x7, "187194c3"}, 0x0, 0x2, {&(0x7f00000000c0)=[{0x109, 0x19d, {&(0x7f0000000040)}, 0x1}, {0x8b, 0x7ff, {&(0x7f0000000080)}, 0x5}]}, 0x5, 0x0, r1}) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x200, 0x0, 0x1008, 0x1000, 0x80, 0x7, 0x8000000, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0x1f}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) 08:17:55 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) syz_open_pts(r0, 0x12000) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x200, 0x0, 0x1008, 0x1000, 0x80, 0x7, 0x8000000, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0x1f}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x200, 0x0, 0x1008, 0x1000, 0x80, 0x7, 0x8000000, 0x1}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x80) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0x1f}, 0x10) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) (async) 08:17:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0xa9, "f5b06000f3747e6afebe62d2b595a883076c87471ab06e36aeb0f35f3e0358c8", 0x20, 0xff, 0x3, 0x2, 0x5}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = syz_open_pts(0xffffffffffffffff, 0x200000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 08:17:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x200, 0x0, 0x1008, 0x1000, 0x80, 0x7, 0x8000000, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r3, 0x1f}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) 08:17:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xc00, 0xfff, 0x4, 0x9, 0x59, "016d3c1f41547ade809d4dfc7e5fad5eeaffe1", 0x2, 0x6}) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x4}, 0xe) 08:17:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) socketpair(0x6, 0x800, 0x200, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x1) 08:17:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) 08:17:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) socketpair(0x6, 0x800, 0x200, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x1) 08:17:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) (async) accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) 08:17:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) socketpair(0x6, 0x800, 0x200, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) socketpair(0x6, 0x800, 0x200, &(0x7f0000000040)) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x1) (async) 08:17:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x77, 0x2}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) memfd_create(&(0x7f0000000180)='[$}^-\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r2, 0x4) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000140)={0xda, 0x40, &(0x7f0000000040)="e2852d95776f305a145027420745421d3cf34b946c27897301fb998e51fe8f9fbb812c5556b6ec9c3283abfbe1229b1f87e7fbdad022b9d7d579f0ee4b6a1870f7047bb698521a1818300eb4693c24316b41cf26ca88703ce16718c5400357b74582bc747b01aa90c4373599bc0feb2987922c697cb1dd58908286c3d0fcf0a10b104fb2e20e93c213376ab1d25995f806d29b246d503abb2e9947541839814aa14f68eff28dbe2f5a696c435e0448e473c61a44bb1607a7cd762b144beca276b29f70ebe4aa086f6a262089caee306b3d55df0421fd0035157930ea076dbf25150b5094b6deb776e9340d6f5367f163d9105ec93f33", {0x1, 0x7, 0x43353039, 0x8, 0x8, 0x4cb, 0x2, 0x2}}) 08:17:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x77, 0x2}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) memfd_create(&(0x7f0000000180)='[$}^-\x00', 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r2, 0x4) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000140)={0xda, 0x40, &(0x7f0000000040)="e2852d95776f305a145027420745421d3cf34b946c27897301fb998e51fe8f9fbb812c5556b6ec9c3283abfbe1229b1f87e7fbdad022b9d7d579f0ee4b6a1870f7047bb698521a1818300eb4693c24316b41cf26ca88703ce16718c5400357b74582bc747b01aa90c4373599bc0feb2987922c697cb1dd58908286c3d0fcf0a10b104fb2e20e93c213376ab1d25995f806d29b246d503abb2e9947541839814aa14f68eff28dbe2f5a696c435e0448e473c61a44bb1607a7cd762b144beca276b29f70ebe4aa086f6a262089caee306b3d55df0421fd0035157930ea076dbf25150b5094b6deb776e9340d6f5367f163d9105ec93f33", {0x1, 0x7, 0x43353039, 0x8, 0x8, 0x4cb, 0x2, 0x2}}) 08:17:56 executing program 1: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) syz_open_pts(r0, 0x12000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:17:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x77, 0x2}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) memfd_create(&(0x7f0000000180)='[$}^-\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r2, 0x4) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000140)={0xda, 0x40, &(0x7f0000000040)="e2852d95776f305a145027420745421d3cf34b946c27897301fb998e51fe8f9fbb812c5556b6ec9c3283abfbe1229b1f87e7fbdad022b9d7d579f0ee4b6a1870f7047bb698521a1818300eb4693c24316b41cf26ca88703ce16718c5400357b74582bc747b01aa90c4373599bc0feb2987922c697cb1dd58908286c3d0fcf0a10b104fb2e20e93c213376ab1d25995f806d29b246d503abb2e9947541839814aa14f68eff28dbe2f5a696c435e0448e473c61a44bb1607a7cd762b144beca276b29f70ebe4aa086f6a262089caee306b3d55df0421fd0035157930ea076dbf25150b5094b6deb776e9340d6f5367f163d9105ec93f33", {0x1, 0x7, 0x43353039, 0x8, 0x8, 0x4cb, 0x2, 0x2}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x77, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) memfd_create(&(0x7f0000000180)='[$}^-\x00', 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7}, 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r2, 0x4) (async) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000140)={0xda, 0x40, &(0x7f0000000040)="e2852d95776f305a145027420745421d3cf34b946c27897301fb998e51fe8f9fbb812c5556b6ec9c3283abfbe1229b1f87e7fbdad022b9d7d579f0ee4b6a1870f7047bb698521a1818300eb4693c24316b41cf26ca88703ce16718c5400357b74582bc747b01aa90c4373599bc0feb2987922c697cb1dd58908286c3d0fcf0a10b104fb2e20e93c213376ab1d25995f806d29b246d503abb2e9947541839814aa14f68eff28dbe2f5a696c435e0448e473c61a44bb1607a7cd762b144beca276b29f70ebe4aa086f6a262089caee306b3d55df0421fd0035157930ea076dbf25150b5094b6deb776e9340d6f5367f163d9105ec93f33", {0x1, 0x7, 0x43353039, 0x8, 0x8, 0x4cb, 0x2, 0x2}}) (async) 08:17:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0xa9, "f5b06000f3747e6afebe62d2b595a883076c87471ab06e36aeb0f35f3e0358c8", 0x20, 0xff, 0x3, 0x2, 0x5}) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = syz_open_pts(0xffffffffffffffff, 0x200000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0xa9, "f5b06000f3747e6afebe62d2b595a883076c87471ab06e36aeb0f35f3e0358c8", 0x20, 0xff, 0x3, 0x2, 0x5}) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) syz_open_pts(0xffffffffffffffff, 0x200000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) (async) 08:17:56 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe1b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x98c}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) 08:17:56 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe1b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x98c}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe1b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x98c}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x4}, 0xe) 08:17:57 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe1b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x98c}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd7c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe1b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x98c}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) 08:17:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x11, 0x18, 0x2, 0x11, 0x5, 0x4, 0x5, 0x15f}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80000001, 0x0, 0x2022, 0x100, 0x3ff, 0x80000001, 0x10000}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x1d, 0xa, 0xffffffe1, &(0x7f0000000040)) 08:17:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x11, 0x18, 0x2, 0x11, 0x5, 0x4, 0x5, 0x15f}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80000001, 0x0, 0x2022, 0x100, 0x3ff, 0x80000001, 0x10000}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:17:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x11, 0x18, 0x2, 0x11, 0x5, 0x4, 0x5, 0x15f}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80000001, 0x0, 0x2022, 0x100, 0x3ff, 0x80000001, 0x10000}) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f00000000c0), 0x4800) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x11, 0x18, 0x2, 0x11, 0x5, 0x4, 0x5, 0x15f}) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80000001, 0x0, 0x2022, 0x100, 0x3ff, 0x80000001, 0x10000}) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80000) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:17:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) (async) 08:17:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xfffffffffffffe4f, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 08:17:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x8}, 0xe) 08:17:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80000) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80000) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xfffffffffffffe4f, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 08:17:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:17:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet(0x2, 0x80000, 0xd016) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8db9}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) 08:17:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x1d, 0xa, 0xffffffe1, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x1d, 0xa, 0xffffffe1, &(0x7f0000000040)) (async) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f00000000c0), 0xfffffffffffffe4f, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000040), 0x800) (async) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40000) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000040), 0x800) (async) accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40000) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:17:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) (async) 08:17:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xff16) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 08:17:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0x2000004e) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xff16) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xff16) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 08:17:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:59 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffff99) 08:17:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x1d, 0xa, 0xffffffe1, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x1d, 0xa, 0xffffffe1, &(0x7f0000000040)) (async) 08:17:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet(0x2, 0x80000, 0xd016) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8db9}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet(0x2, 0x80000, 0xd016) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8db9}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) (async) 08:17:59 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffff99) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffff99) (async) 08:17:59 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xffffff99) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) prctl$PR_SET_TIMERSLACK(0x1d, 0xa52) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x1, "021bbf"}, 0x6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08e500584659c5f033954e1d1b6dde312a0bf6b4fb39c4b5e37ef17e2da75924c1c2edc695b3656cb581e97cf1eadb8427753f32b86bfe703f0b75a30aad3f5987cf24646f0ecee3ddfdb5736a2dcdcdce21afad3f1cf495a4f69124dbd760e43dfc5a5c5828be87ec31481abdbb29ee0cd6db0100000000000000ba862c31bfb3e736af80650e963a93315a7df70f5b9494352871c028988049fdb2313da4fb03bacb174b66505cfa", @ANYRES16=r2, @ANYBLOB="02002cbd7000fedbdf25570000000c0099002000000005000000060095000600000006009500080000000600950004000000060095000300000006009500080000000600950001ff000006009500a100000006009500010000000600950003000000"], 0x68}, 0x1, 0x0, 0x0, 0x24040890}, 0x4004000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1f, 0x2, 0x6, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:17:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x80000, 0xd016) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8db9}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) 08:17:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x9, @none, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xff, @any, 0x9}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xfff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x14001, 0x0) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0xa52) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x1, "021bbf"}, 0x6) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08e500584659c5f033954e1d1b6dde312a0bf6b4fb39c4b5e37ef17e2da75924c1c2edc695b3656cb581e97cf1eadb8427753f32b86bfe703f0b75a30aad3f5987cf24646f0ecee3ddfdb5736a2dcdcdce21afad3f1cf495a4f69124dbd760e43dfc5a5c5828be87ec31481abdbb29ee0cd6db0100000000000000ba862c31bfb3e736af80650e963a93315a7df70f5b9494352871c028988049fdb2313da4fb03bacb174b66505cfa", @ANYRES16=r2, @ANYBLOB="02002cbd7000fedbdf25570000000c0099002000000005000000060095000600000006009500080000000600950004000000060095000300000006009500080000000600950001ff000006009500a100000006009500010000000600950003000000"], 0x68}, 0x1, 0x0, 0x0, 0x24040890}, 0x4004000) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0xa52) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0)={0x1, "021bbf"}, 0x6) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08e500584659c5f033954e1d1b6dde312a0bf6b4fb39c4b5e37ef17e2da75924c1c2edc695b3656cb581e97cf1eadb8427753f32b86bfe703f0b75a30aad3f5987cf24646f0ecee3ddfdb5736a2dcdcdce21afad3f1cf495a4f69124dbd760e43dfc5a5c5828be87ec31481abdbb29ee0cd6db0100000000000000ba862c31bfb3e736af80650e963a93315a7df70f5b9494352871c028988049fdb2313da4fb03bacb174b66505cfa", @ANYRES16=r2, @ANYBLOB="02002cbd7000fedbdf25570000000c0099002000000005000000060095000600000006009500080000000600950004000000060095000300000006009500080000000600950001ff000006009500a100000006009500010000000600950003000000"], 0x68}, 0x1, 0x0, 0x0, 0x24040890}, 0x4004000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:17:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:17:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000080)={0x0, @data}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x400, 0x0, 0x20, 0x4, 0x8, 0x1, 0x37}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:00 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x120, "e548df"}, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000080)={0x0, @data}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x400, 0x0, 0x20, 0x4, 0x8, 0x1, 0x37}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000080)={0x0, @data}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x400, 0x0, 0x20, 0x4, 0x8, 0x1, 0x37}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000080)={0x0, @data}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x400, 0x0, 0x20, 0x4, 0x8, 0x1, 0x37}, 0xc) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x880) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x0, [0x0, 0x0, 0x1ff, 0x7, 0x3, 0x6, 0x7, 0x1, 0x8, 0x5, 0x7, 0xff, 0x8001, 0x0, 0x7ff, 0xa800, 0x101, 0x9, 0x3, 0x3, 0x2, 0x3, 0x4, 0x1, 0xe35, 0xff56, 0x0, 0x9, 0xffff, 0x1000, 0x9, 0x8eb6, 0x40, 0x3, 0x3f, 0x1, 0xffe1, 0xedc1, 0xfff8, 0xcac, 0x82, 0x0, 0x8, 0x5, 0xf801, 0x1, 0x3ee8, 0x13], 0x3}) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x880) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x0, [0x0, 0x0, 0x1ff, 0x7, 0x3, 0x6, 0x7, 0x1, 0x8, 0x5, 0x7, 0xff, 0x8001, 0x0, 0x7ff, 0xa800, 0x101, 0x9, 0x3, 0x3, 0x2, 0x3, 0x4, 0x1, 0xe35, 0xff56, 0x0, 0x9, 0xffff, 0x1000, 0x9, 0x8eb6, 0x40, 0x3, 0x3f, 0x1, 0xffe1, 0xedc1, 0xfff8, 0xcac, 0x82, 0x0, 0x8, 0x5, 0xf801, 0x1, 0x3ee8, 0x13], 0x3}) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1f, 0x2, 0x6, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socketpair(0x1f, 0x2, 0x6, &(0x7f00000000c0)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) getpid() (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r1) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x880) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x0, [0x0, 0x0, 0x1ff, 0x7, 0x3, 0x6, 0x7, 0x1, 0x8, 0x5, 0x7, 0xff, 0x8001, 0x0, 0x7ff, 0xa800, 0x101, 0x9, 0x3, 0x3, 0x2, 0x3, 0x4, 0x1, 0xe35, 0xff56, 0x0, 0x9, 0xffff, 0x1000, 0x9, 0x8eb6, 0x40, 0x3, 0x3f, 0x1, 0xffe1, 0xedc1, 0xfff8, 0xcac, 0x82, 0x0, 0x8, 0x5, 0xf801, 0x1, 0x3ee8, 0x13], 0x3}) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x0) (rerun: 32) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x9, @none, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xff, @any, 0x9}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xfff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x14001, 0x0) 08:18:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, @none, 0x8040, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x3, 0x81, 0x5, 0x2, 0x3f, 0x3f, 0x2}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3f, @any, 0xff7f}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3e19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4000, 0x2}, 0xe) 08:18:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, @none, 0x8040, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, @none, 0x8040, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) (async) 08:18:00 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x120, "e548df"}, 0x6) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x3, 0x81, 0x5, 0x2, 0x3f, 0x3f, 0x2}, 0xc) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3f, @any, 0xff7f}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3e19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4000, 0x2}, 0xe) 08:18:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, @none, 0x8040, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) 08:18:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x3, 0x81, 0x5, 0x2, 0x3f, 0x3f, 0x2}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x3f, @any, 0xff7f}, 0xe) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3e19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4000, 0x2}, 0xe) 08:18:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1f, 0x2, 0x6, &(0x7f00000000c0)) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r1) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:01 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x120, "e548df"}, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:01 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x9, @none, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xff, @any, 0x9}, 0xe) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xfff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x14001, 0x0) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9c0a, @any, 0x4a0f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9c0a, @any, 0x4a0f, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9c0a, @any, 0x4a0f, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9c0a, @any, 0x4a0f, 0x1}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 64) 08:18:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8913, &(0x7f0000000080)={'wlan1\x00'}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180)={0x4, "36d3b7"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x1}, 0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000001c0)={0x7, 0x38416761, 0x7ff, 0x7, 0x1, @stepwise={{0xffffffff, 0x7}, {0xec, 0x401}, {0xe91a, 0x1ff}}}) 08:18:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7fff, @none, 0x1, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8001, 0x2}, 0xe) 08:18:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = timerfd_create(0x1, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) 08:18:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xfffe}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) 08:18:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xfffe}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) 08:18:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xfffe}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0xfffe}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) (async) 08:18:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8913, &(0x7f0000000080)={'wlan1\x00'}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180)={0x4, "36d3b7"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x1}, 0x2) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000001c0)={0x7, 0x38416761, 0x7ff, 0x7, 0x1, @stepwise={{0xffffffff, 0x7}, {0xec, 0x401}, {0xe91a, 0x1ff}}}) 08:18:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:18:03 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7fff, @none, 0x1, 0x2}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8001, 0x2}, 0xe) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x3}, 0xe) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x28f1) 08:18:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = timerfd_create(0x1, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 32) ioctl$RTC_UIE_ON(r2, 0x7003) (rerun: 32) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x3}, 0xe) (async) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x28f1) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x3}, 0xe) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x28f1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x3}, 0xe) (async) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x28f1) (async) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x62) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x9, 0x58, 0x6b, 0x7}, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x62) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x9, 0x58, 0x6b, 0x7}, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x62) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x9, 0x58, 0x6b, 0x7}, 0xc) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) pipe2(&(0x7f0000000100), 0x4880) (async) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) (async) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x62) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x9, 0x9, 0x9, 0x58, 0x6b, 0x7}, 0xc) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 08:18:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xffa}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x616}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048011}, 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x1}, 0x2a) syz_open_pts(0xffffffffffffffff, 0x600) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x24, 0x200, 0x7, 0x9, 0x75, 0x8}, 0xc) 08:18:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8913, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180)={0x4, "36d3b7"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x1}, 0x2) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000001c0)={0x7, 0x38416761, 0x7ff, 0x7, 0x1, @stepwise={{0xffffffff, 0x7}, {0xec, 0x401}, {0xe91a, 0x1ff}}}) 08:18:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:18:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7fff, @none, 0x1, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8001, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7fff, @none, 0x1, 0x2}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8001, 0x2}, 0xe) (async) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x1}, 0x2a) syz_open_pts(0xffffffffffffffff, 0x600) (async) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x24, 0x200, 0x7, 0x9, 0x75, 0x8}, 0xc) 08:18:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) r1 = timerfd_create(0x1, 0x0) (rerun: 32) timerfd_gettime(r1, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$RTC_UIE_ON(r2, 0x7003) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x1}, 0x2a) syz_open_pts(0xffffffffffffffff, 0x600) r2 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x24, 0x200, 0x7, 0x9, 0x75, 0x8}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x1}, 0x2a) (async) syz_open_pts(0xffffffffffffffff, 0x600) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x24, 0x200, 0x7, 0x9, 0x75, 0x8}, 0xc) (async) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xffa}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x616}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048011}, 0x800) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xffa}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x616}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048011}, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = timerfd_create(0x4, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"26e69afeb428fbe72cfb1b24341f76fe1791233734ecd2c5e2c5720b4f1b01f0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffe}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) read$proc_mixer(r2, &(0x7f00000000c0)=""/152, 0x98) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x0, 0x2}, 0xe) 08:18:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 08:18:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) (async) 08:18:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = timerfd_create(0x4, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"26e69afeb428fbe72cfb1b24341f76fe1791233734ecd2c5e2c5720b4f1b01f0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) timerfd_create(0x4, 0x0) (async) timerfd_gettime(r2, &(0x7f0000000040)) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"26e69afeb428fbe72cfb1b24341f76fe1791233734ecd2c5e2c5720b4f1b01f0"}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x18, 0x3, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 08:18:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r2 = timerfd_create(0x4, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"26e69afeb428fbe72cfb1b24341f76fe1791233734ecd2c5e2c5720b4f1b01f0", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r3}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:05 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000140)={0x10000, "cc1cc865b2ad32d0a45b8817a7c451d039597ff00d37915af8a782c939506436", 0x0, 0x2, 0x8001, 0x4, 0x2}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x22, 0x4) 08:18:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) r4 = accept4$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x1, @any, 0xb3, 0x1}, 0xe) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfe, 0x7, 0x3, 0x339, 0x7, "c8cb60f6b12b3bf7adf95463e34aaf21ac92c2", 0x4, 0x5}) 08:18:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) r4 = accept4$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x1, @any, 0xb3, 0x1}, 0xe) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfe, 0x7, 0x3, 0x339, 0x7, "c8cb60f6b12b3bf7adf95463e34aaf21ac92c2", 0x4, 0x5}) 08:18:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xffa}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf6c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x616}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048011}, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) r4 = accept4$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x1, @any, 0xb3, 0x1}, 0xe) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfe, 0x7, 0x3, 0x339, 0x7, "c8cb60f6b12b3bf7adf95463e34aaf21ac92c2", 0x4, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80800) (async) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x1, @any, 0xb3, 0x1}, 0xe) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfe, 0x7, 0x3, 0x339, 0x7, "c8cb60f6b12b3bf7adf95463e34aaf21ac92c2", 0x4, 0x5}) (async) 08:18:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffe}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 64) read$proc_mixer(r2, &(0x7f00000000c0)=""/152, 0x98) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x0, 0x2}, 0xe) 08:18:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x40, 0x4) pipe2(&(0x7f0000000080), 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:18:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @none, 0xe87, 0x2}, 0xe) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000240)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x4489, 0xaf4d, 0x26656f2c, 0x91cd, 0x8, 0x0, 0x17, 0x9}}) 08:18:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) 08:18:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x18, 0x3, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) 08:18:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @none, 0xe87, 0x2}, 0xe) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000240)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x4489, 0xaf4d, 0x26656f2c, 0x91cd, 0x8, 0x0, 0x17, 0x9}}) 08:18:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000140)={0x10000, "cc1cc865b2ad32d0a45b8817a7c451d039597ff00d37915af8a782c939506436", 0x0, 0x2, 0x8001, 0x4, 0x2}) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x22, 0x4) 08:18:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x7, @none, 0xe87, 0x2}, 0xe) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000240)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x4489, 0xaf4d, 0x26656f2c, 0x91cd, 0x8, 0x0, 0x17, 0x9}}) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80400) 08:18:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x6a}, 0xe) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) socketpair(0x1f, 0x800, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x21, 0x2f, 0x12, 0xe, 0x2, 0x8000, 0x5, 0xb0, 0xffffffffffffffff}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x100, @none, 0x7ff, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0xfff7, 0x2, 0x1, 0x0, 0x2, 0x3f, 0x1ff}, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0xbb3d, 0x6, 0x6, 0xf1, 0x62d, 0x4, 0x8, 0x6, 0x1c2, 0x401, 0x4, 0x7f, 0x8001, 0x7, 0x1, 0x9, 0x1, 0x3, 0x3ff, 0x3, 0xf, 0x858, 0x5, 0x800, 0x8, 0xfff, 0x81, 0xff, 0x4, 0x4e, 0x1]}) 08:18:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffe}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) read$proc_mixer(r2, &(0x7f00000000c0)=""/152, 0x98) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffd, @any, 0x0, 0x2}, 0xe) 08:18:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x40, 0x4) pipe2(&(0x7f0000000080), 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x40, 0x4) (async) pipe2(&(0x7f0000000080), 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) socketpair(0x1f, 0x800, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x21, 0x2f, 0x12, 0xe, 0x2, 0x8000, 0x5, 0xb0, 0xffffffffffffffff}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x100, @none, 0x7ff, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0xfff7, 0x2, 0x1, 0x0, 0x2, 0x3f, 0x1ff}, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0xbb3d, 0x6, 0x6, 0xf1, 0x62d, 0x4, 0x8, 0x6, 0x1c2, 0x401, 0x4, 0x7f, 0x8001, 0x7, 0x1, 0x9, 0x1, 0x3, 0x3ff, 0x3, 0xf, 0x858, 0x5, 0x800, 0x8, 0xfff, 0x81, 0xff, 0x4, 0x4e, 0x1]}) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) (async) socketpair(0x1f, 0x800, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x21, 0x2f, 0x12, 0xe, 0x2, 0x8000, 0x5, 0xb0, 0xffffffffffffffff}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x100, @none, 0x7ff, 0x2}, 0xe) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0xfff7, 0x2, 0x1, 0x0, 0x2, 0x3f, 0x1ff}, 0xc) (rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0xbb3d, 0x6, 0x6, 0xf1, 0x62d, 0x4, 0x8, 0x6, 0x1c2, 0x401, 0x4, 0x7f, 0x8001, 0x7, 0x1, 0x9, 0x1, 0x3, 0x3ff, 0x3, 0xf, 0x858, 0x5, 0x800, 0x8, 0xfff, 0x81, 0xff, 0x4, 0x4e, 0x1]}) 08:18:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) socketpair(0x18, 0x3, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x1, 0x2}, 0xe) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x1, 0x2}, 0xe) 08:18:06 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000140)={0x10000, "cc1cc865b2ad32d0a45b8817a7c451d039597ff00d37915af8a782c939506436", 0x0, 0x2, 0x8001, 0x4, 0x2}) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x22, 0x4) 08:18:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x1, 0x2}, 0xe) 08:18:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) 08:18:06 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async, rerun: 32) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (rerun: 32) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async, rerun: 64) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x6a}, 0xe) (rerun: 64) 08:18:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) (async) 08:18:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x0, 0x1, 0x1, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000000c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 08:18:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x40, 0x4) (async) pipe2(&(0x7f0000000080), 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:18:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) (async) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x2}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:07 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x40800) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0xc00) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x2}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x2}, 0x10) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:07 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc492, 0x52080) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x11000, 0x4) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x2}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x2}, 0x10) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80815) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @none, 0x5}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1}, 0x2) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async, rerun: 64) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (rerun: 64) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x6a}, 0xe) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80815) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @none, 0x5}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1}, 0x2) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 64) 08:18:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80815) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @none, 0x5}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1}, 0x2) (async) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) socketpair(0x0, 0x1, 0x1, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000000c0)) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 08:18:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x34, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x40800) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0xc00) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:08 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc492, 0x52080) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x11000, 0x4) 08:18:08 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x5, @any, 0x6, 0x2}, 0xe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:08 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x5, @any, 0x6, 0x2}, 0xe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x5, @any, 0x6, 0x2}, 0xe) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2000, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), 0xffffffffffffffa6) 08:18:08 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x5, @any, 0x6, 0x2}, 0xe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2000, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), 0xffffffffffffffa6) 08:18:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) socketpair(0x0, 0x1, 0x1, &(0x7f0000000080)) (rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000000c0)) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 08:18:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x34, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) 08:18:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2000, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async, rerun: 32) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), 0xffffffffffffffa6) 08:18:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x40800) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0xc00) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) (async) 08:18:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc492, 0x52080) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x11000, 0x4) 08:18:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) (async) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xaa, 0x0, 0x200, 0x70bd31, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x0, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5f883d4bb7887644b0187d758693b7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4006}, @NL80211_ATTR_PMK={0x0, 0xfe, "4c1fedbc02fcf481a4af93437460a1fe"}, @NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xaa, 0x0, 0x200, 0x70bd31, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x0, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5f883d4bb7887644b0187d758693b7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4006}, @NL80211_ATTR_PMK={0x0, 0xfe, "4c1fedbc02fcf481a4af93437460a1fe"}, @NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) 08:18:09 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x5, 0x2c2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xaa, 0x0, 0x200, 0x70bd31, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x0, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5f883d4bb7887644b0187d758693b7b6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4006}, @NL80211_ATTR_PMK={0x0, 0xfe, "4c1fedbc02fcf481a4af93437460a1fe"}, @NL80211_ATTR_SSID={0x0, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) 08:18:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x34, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x419f, 0x3, 0x0, 0x1, 0x7, 0x2}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x419f, 0x3, 0x0, 0x1, 0x7, 0x2}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x419f, 0x3, 0x0, 0x1, 0x7, 0x2}, 0xc) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xffff, 0x2}, 0xe) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, '\x00', {0x0, @bt={0x8000, 0x101, 0x0, 0x1, 0x0, 0x1000, 0x8, 0xfff, 0x400, 0x8, 0x0, 0x80000000, 0x8000, 0x400, 0x0, 0x18, {0x247, 0x3ac}, 0x5, 0x4}}}) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x419f, 0x3, 0x0, 0x1, 0x7, 0x2}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x419f, 0x3, 0x0, 0x1, 0x7, 0x2}, 0xc) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @none, 0x5}, 0xe) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept$unix(r1, 0x0, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:18:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (rerun: 64) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x90) 08:18:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xffff, 0x2}, 0xe) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, '\x00', {0x0, @bt={0x8000, 0x101, 0x0, 0x1, 0x0, 0x1000, 0x8, 0xfff, 0x400, 0x8, 0x0, 0x80000000, 0x8000, 0x400, 0x0, 0x18, {0x247, 0x3ac}, 0x5, 0x4}}}) 08:18:10 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x5, 0x2c2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async, rerun: 64) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x90) (rerun: 64) 08:18:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xffff, 0x2}, 0xe) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, '\x00', {0x0, @bt={0x8000, 0x101, 0x0, 0x1, 0x0, 0x1000, 0x8, 0xfff, 0x400, 0x8, 0x0, 0x80000000, 0x8000, 0x400, 0x0, 0x18, {0x247, 0x3ac}, 0x5, 0x4}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0xffff, 0x2}, 0xe) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$RTC_AIE_OFF(r1, 0x7002) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000100)={0x40, 0x0, '\x00', {0x0, @bt={0x8000, 0x101, 0x0, 0x1, 0x0, 0x1000, 0x8, 0xfff, 0x400, 0x8, 0x0, 0x80000000, 0x8000, 0x400, 0x0, 0x18, {0x247, 0x3ac}, 0x5, 0x4}}}) (async) 08:18:10 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000200)={"f15297132090207e61b93759258f4e358646a3e845f9768ef1cf45cb212b174c"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2a28e0ec43bbf759, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xab2, 0x1, 0x80, 0x9, 0x9b13, 0x4, 0x2, 0xd}}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x769}, 0x2a) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x90) 08:18:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009997c000e3071d12ee9a0000000000007ff9c5c973e880df4ce5abc89fa71b4508660cee2ca3e664c6b6df03004d52530478ba977af5012f5f16f61c225c9888d9fa2b9c2d428250fc1369c7df2ebfe84a0f9ed445bf0c31aef69167060916"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 08:18:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) 08:18:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @none, 0x5}, 0xe) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept$unix(r1, 0x0, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @none, 0x5}, 0xe) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept$unix(r1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) 08:18:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xffffffffffffff01) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$RTC_VL_CLR(r4, 0x7014) 08:18:11 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x5, 0x2c2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xffffffffffffff01) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$RTC_VL_CLR(r4, 0x7014) 08:18:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @none, 0x5}, 0xe) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept$unix(r1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xffffffffffffff01) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$RTC_VL_CLR(r4, 0x7014) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xffff, 0x2}, 0xffffffffffffff01) (async) pipe2(&(0x7f0000000400), 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000040), 0x4880) (async) ioctl$RTC_VL_CLR(r4, 0x7014) (async) 08:18:11 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000200)={"f15297132090207e61b93759258f4e358646a3e845f9768ef1cf45cb212b174c"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2a28e0ec43bbf759, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xab2, 0x1, 0x80, 0x9, 0x9b13, 0x4, 0x2, 0xd}}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x769}, 0x2a) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000200)={"f15297132090207e61b93759258f4e358646a3e845f9768ef1cf45cb212b174c"}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2a28e0ec43bbf759, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000100), 0x80880) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xab2, 0x1, 0x80, 0x9, 0x9b13, 0x4, 0x2, 0xd}}) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x769}, 0x2a) (async) 08:18:11 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009997c000e3071d12ee9a0000000000007ff9c5c973e880df4ce5abc89fa71b4508660cee2ca3e664c6b6df03004d52530478ba977af5012f5f16f61c225c9888d9fa2b9c2d428250fc1369c7df2ebfe84a0f9ed445bf0c31aef69167060916"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none, 0x729}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none, 0x729}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none, 0x729}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x12eb, 0x3, 0x1, 0xccc8, 0x9, 0x7fffffffffffffff, 0x1, 0xa}}) 08:18:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000480)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x80, '\x00', &(0x7f0000000080)=0x8}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000440)={0xa0, 0x7, 0x7, 0x5, 0x2, 0x9, 0x40}, 0xc) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_getres(0x0, &(0x7f0000000300)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)=@multiplanar_userptr={0x200, 0x1, 0x4, 0x10000, 0x1995, {r4, r5/1000+60000}, {0x2, 0x0, 0xaf, 0x80, 0x3, 0x2, 'gL]h'}, 0x5, 0x2, {&(0x7f0000000280)=[{0x6, 0x6, {&(0x7f0000000200)}, 0xeaa8}, {0x9, 0xdc, {&(0x7f0000000240)}, 0xd3}]}, 0x3, 0x0, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x7ff, 0x0, 0x200c, 0x7fffffff, 0x2, 0x7, 0x6, 0x1}) 08:18:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000480)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x80, '\x00', &(0x7f0000000080)=0x8}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000440)={0xa0, 0x7, 0x7, 0x5, 0x2, 0x9, 0x40}, 0xc) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_getres(0x0, &(0x7f0000000300)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)=@multiplanar_userptr={0x200, 0x1, 0x4, 0x10000, 0x1995, {r4, r5/1000+60000}, {0x2, 0x0, 0xaf, 0x80, 0x3, 0x2, 'gL]h'}, 0x5, 0x2, {&(0x7f0000000280)=[{0x6, 0x6, {&(0x7f0000000200)}, 0xeaa8}, {0x9, 0xdc, {&(0x7f0000000240)}, 0xd3}]}, 0x3, 0x0, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x7ff, 0x0, 0x200c, 0x7fffffff, 0x2, 0x7, 0x6, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000480)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x80, '\x00', &(0x7f0000000080)=0x8}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000440)={0xa0, 0x7, 0x7, 0x5, 0x2, 0x9, 0x40}, 0xc) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) clock_getres(0x0, &(0x7f0000000300)) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)=@multiplanar_userptr={0x200, 0x1, 0x4, 0x10000, 0x1995, {r4, r5/1000+60000}, {0x2, 0x0, 0xaf, 0x80, 0x3, 0x2, 'gL]h'}, 0x5, 0x2, {&(0x7f0000000280)=[{0x6, 0x6, {&(0x7f0000000200)}, 0xeaa8}, {0x9, 0xdc, {&(0x7f0000000240)}, 0xd3}]}, 0x3, 0x0, r6}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) accept4$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80c00) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x7ff, 0x0, 0x200c, 0x7fffffff, 0x2, 0x7, 0x6, 0x1}) (async) 08:18:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x1, 0x3000000, 0x3}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1, 0x13, r2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000480)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x80, '\x00', &(0x7f0000000080)=0x8}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000440)={0xa0, 0x7, 0x7, 0x5, 0x2, 0x9, 0x40}, 0xc) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) clock_getres(0x0, &(0x7f0000000300)) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000380)=@multiplanar_userptr={0x200, 0x1, 0x4, 0x10000, 0x1995, {r4, r5/1000+60000}, {0x2, 0x0, 0xaf, 0x80, 0x3, 0x2, 'gL]h'}, 0x5, 0x2, {&(0x7f0000000280)=[{0x6, 0x6, {&(0x7f0000000200)}, 0xeaa8}, {0x9, 0xdc, {&(0x7f0000000240)}, 0xd3}]}, 0x3, 0x0, r6}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x7ff, 0x0, 0x200c, 0x7fffffff, 0x2, 0x7, 0x6, 0x1}) 08:18:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x70}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x1, 0x3000000, 0x3}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1, 0x13, r2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:12 executing program 5: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000200)={"f15297132090207e61b93759258f4e358646a3e845f9768ef1cf45cb212b174c"}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2a28e0ec43bbf759, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xab2, 0x1, 0x80, 0x9, 0x9b13, 0x4, 0x2, 0xd}}) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x769}, 0x2a) 08:18:12 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009997c000e3071d12ee9a0000000000007ff9c5c973e880df4ce5abc89fa71b4508660cee2ca3e664c6b6df03004d52530478ba977af5012f5f16f61c225c9888d9fa2b9c2d428250fc1369c7df2ebfe84a0f9ed445bf0c31aef69167060916"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffe1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004000) 08:18:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x1, 0x3000000, 0x3}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x1, 0x13, r2, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x12eb, 0x3, 0x1, 0xccc8, 0x9, 0x7fffffffffffffff, 0x1, 0xa}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x12eb, 0x3, 0x1, 0xccc8, 0x9, 0x7fffffffffffffff, 0x1, 0xa}}) (async) 08:18:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x880) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x880) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x70}, 0xe) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x880) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x9, 'r=\r'}, 0x6) 08:18:13 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x2, 0x3, 0x1f, 0x300, 0x1, 0xfff, 0x0, 0x3}}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x4, 0x1}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:18:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/188) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x180800) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:13 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x2, 0x3, 0x1f, 0x300, 0x1, 0xfff, 0x0, 0x3}}) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x4, 0x1}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:18:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x12eb, 0x3, 0x1, 0xccc8, 0x9, 0x7fffffffffffffff, 0x1, 0xa}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x12eb, 0x3, 0x1, 0xccc8, 0x9, 0x7fffffffffffffff, 0x1, 0xa}}) (async) 08:18:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:13 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x2, 0x3, 0x1f, 0x300, 0x1, 0xfff, 0x0, 0x3}}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x4, 0x1}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x2, 0x3, 0x1f, 0x300, 0x1, 0xfff, 0x0, 0x3}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x4, 0x1}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 08:18:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0xe, 0x1800) r2 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0)=0x2d, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 08:18:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x70}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x9, 'r=\r'}, 0x6) 08:18:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x540a, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/188) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x180800) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/188) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x180800) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:18:14 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x5, 0xa36, 0x20}) 08:18:14 executing program 3: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:14 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x5, 0xa36, 0x20}) 08:18:14 executing program 3: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/188) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r2 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x180800) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0xe, 0x1800) r2 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0)=0x2d, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0xe, 0x1800) (async) accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) (async) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0)=0x2d, 0x4) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) 08:18:14 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x5, 0xa36, 0x20}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x5, 0xa36, 0x20}) (async) 08:18:14 executing program 3: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_overlay={0x3, 0x2, 0x4, 0x400, 0x7fffffff, {r2, r3/1000+10000}, {0x4, 0x0, 0x7, 0x81, 0x4, 0x60, "196a4af0"}, 0xffff72e9, 0x3, {&(0x7f0000000180)=[{0x1, 0x7, {}, 0xf}, {0x80, 0x1, {0x155}, 0x6}]}, 0x2, 0x0, r4}) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000280)={0x6, 0x10003, "f61912f21936edc66ed661189529c91b36e0112465f7bb6f", {0x2}, 0x40}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 08:18:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x540a, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x9, 'r=\r'}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x9, 'r=\r'}, 0x6) (async) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x22, 0x4) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) 08:18:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)=0xe, 0x1800) (async, rerun: 32) r2 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800) (rerun: 32) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0)=0x2d, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 08:18:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) (async) 08:18:15 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) 08:18:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_overlay={0x3, 0x2, 0x4, 0x400, 0x7fffffff, {r2, r3/1000+10000}, {0x4, 0x0, 0x7, 0x81, 0x4, 0x60, "196a4af0"}, 0xffff72e9, 0x3, {&(0x7f0000000180)=[{0x1, 0x7, {}, 0xf}, {0x80, 0x1, {0x155}, 0x6}]}, 0x2, 0x0, r4}) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000280)={0x6, 0x10003, "f61912f21936edc66ed661189529c91b36e0112465f7bb6f", {0x2}, 0x40}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 08:18:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x540a, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PIO_CMAP(r1, 0x540a, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:16 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) 08:18:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xffff, 0x1, 0x8, 0x1, 0x0, 0x2, 0x4}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none, 0x7f}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:16 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) 08:18:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xffff, 0x1, 0x8, 0x1, 0x0, 0x2, 0x4}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none, 0x7f}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x1) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xffff, 0x1, 0x8, 0x1, 0x0, 0x2, 0x4}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none, 0x7f}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f00000000c0), 0x84880) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) 08:18:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000180)=r1) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2, 0xbf5, 0x2, 0x48, 0x2, 0x3f}, 0xc) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES8=r2], 0x3c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000080)=0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xffff, 0x1, 0x8, 0x1, 0x0, 0x2, 0x4}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffd, @none, 0x7f}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xa3c, r4, 0xa09, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x36c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "ee444b69eef8489c4111d222240283e0af47247b845ecf42e4502f348d4bcf0d6c2255d9b3f04d450efb76f104cec4e693b093eaf172710555a1a3a70140ef35c6531a8548e9781c3a9c0f5debd07c6aafe8cc307343ab5fe515c58561dee1aaf8d8a9e11ae8ac13614e14287ca0e006cffe4620345d74c5b4c7a847a02035538d649352d02417660b7f1b62b067d0e9c24c8dd13c99e84f4bc61a6b7d49d0f337b9fa65e2cc235040bb68513ce033b29b718cf939196e54d3a15be8eba790496450758cdbe7f4faaab62da9603e09d566594eea410049c63d677fe624ae5d17eb733f23a0610d27d3241d75678aef7879"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "37496f2946ea81cfc8ba88269744731bd35a3aea62805f"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "e0d1e0817c4fcad956e6cde7449ff98ef61298dcca93d11eb80c752c2aacf45bf4f6568ff5b581dba281e4721b4b1f0f8b442307f6f5861af62d7a2eb1d96993781611979773f2aa671be229210288b455ade06d88bbe19d117223cd27aa5992e745538ccc73556479341a451f15fcb7b8d8b3753910c1a24b38946ee7b8cb5248f169d04a1bc0db5be4d194592346fd1e0c42204323348f425c27a08aaf99fc1dff37e87d48324c0ab426087608c4ba034e55ff1c7a275b7d46bfe9333656d6afbdf9e419f39b00ad003b791c99"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "1e03138bfc2282c4d9f04fa87344b4627ce755f106df6c9f84a188f07ae7d2787763c9029a017a24db8ff644bf22adeec730d9c520a2509a57c6d381cee891b203e1623b0fc28e88cf5219ad8c44eb7ba1cbb7f4604bba9c87bb4c6faacf47f5c4fa19be48226941347b5c0738d0a706d951a9ec76131f6872fd42588bc0b252a86a9616adebfb9271457e0d1325f0c5beb8ef6ee9e07f8fef7d840d83358b6288426559323d1baef5b3ffee2a2add0916ddb7c3e23b6d5a"}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0da46c5a78abacd84f807d2654b941c96c273508a9966d23061f793390b3e5ca1399379170afeceabaf607bc28f918771409c6c5c1c87cb2994d4ec68926fbc723056435554b687deafec6a96af3d4920e5a7f396f91d5cc16ba7ed35531749695f51de53991d239920710109ac209e83ba51ad24cb5a92b4bde75501bd12cb31c57a5f5da39032a77b6f3a5b1158118aecf1a83c887e96cd97afb0f75ba0e9a6bbfa0bf411e7e4fc33452b5e5c760c1079164ed41033f18eb23ca5a13a17a53"}]}, @NL80211_ATTR_BEACON_TAIL={0x15e, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x40, 0x7}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xcc, 0x9, 0x3, @device_b, 0x3, @device_b, 0x7fff, 0x6eca, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1ac}, {{}, @device_a, 0x1}, {{}, @device_a, 0xa7}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x40, 0x390, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x5}}, @perr={0x84, 0xef, {0x3f, 0xf, [@ext={{}, @device_a, 0x401, @broadcast}, @ext={{}, @device_a, 0x2, @device_b, 0xe}, @not_ext={{}, @device_a, 0x4, "", 0x2a}, @ext={{}, @device_b, 0x6, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x8000, "", 0x3a}, @ext={{}, @device_a, 0x7ff, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_a, 0x38}, @not_ext={{}, @device_b, 0x10001, "", 0x3f}, @not_ext={{}, @device_a, 0x8, "", 0x9}, @not_ext={{}, @broadcast, 0x83, "", 0x2c}, @not_ext={{}, @device_b, 0x2, "", 0xd}, @ext={{}, @device_b, 0x3ff, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xc}, @not_ext={{}, @device_b, 0xd06, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x17}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0xa, 0x49}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x3, 0x4, @device_b, 0x1, 0x1, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb59, "ec3e83d4a123", @short="8d9f0d18f957a2e9"}}, @link_id={0x65, 0x12, {@from_mac}}, @random_vendor={0xdd, 0x66, "3d9544202c0a8a62210000e352c7c523e6b89a73c4ee942352429998e4265edafc4e381ba0b10273843784ee0bbb9c16bb7c5f700b872a214b217d52bc9816675f75e444a0cba1366905cef5ade1fe6090c75633add7fea7f66a0023cd7bc39803d5240dae0f"}]}, @NL80211_ATTR_PROBE_RESP={0x434, 0x91, "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"}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x20008002}, 0x4854) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f00000000c0)) 08:18:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000180)=r1) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2, 0xbf5, 0x2, 0x48, 0x2, 0x3f}, 0xc) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES8=r2], 0x3c) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:16 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:18:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_overlay={0x3, 0x2, 0x4, 0x400, 0x7fffffff, {r2, r3/1000+10000}, {0x4, 0x0, 0x7, 0x81, 0x4, 0x60, "196a4af0"}, 0xffff72e9, 0x3, {&(0x7f0000000180)=[{0x1, 0x7, {}, 0xf}, {0x80, 0x1, {0x155}, 0x6}]}, 0x2, 0x0, r4}) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000280)={0x6, 0x10003, "f61912f21936edc66ed661189529c91b36e0112465f7bb6f", {0x2}, 0x40}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 08:18:16 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffc, 0x1}, 0x3e) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000180)=r1) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2, 0xbf5, 0x2, 0x48, 0x2, 0x3f}, 0xc) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES8=r2], 0x3c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getpid() (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000180)=r1) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2, 0xbf5, 0x2, 0x48, 0x2, 0x3f}, 0xc) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) (async) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES8=r2], 0x3c) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffc, 0x1}, 0x3e) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) ioctl$RTC_AIE_OFF(r3, 0x7002) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffc, 0x1}, 0x3e) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 64) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async, rerun: 64) ioctl$RTC_AIE_OFF(r3, 0x7002) (rerun: 64) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x4}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffc, 0x1}, 0x3e) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xa3c, r4, 0xa09, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x36c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "ee444b69eef8489c4111d222240283e0af47247b845ecf42e4502f348d4bcf0d6c2255d9b3f04d450efb76f104cec4e693b093eaf172710555a1a3a70140ef35c6531a8548e9781c3a9c0f5debd07c6aafe8cc307343ab5fe515c58561dee1aaf8d8a9e11ae8ac13614e14287ca0e006cffe4620345d74c5b4c7a847a02035538d649352d02417660b7f1b62b067d0e9c24c8dd13c99e84f4bc61a6b7d49d0f337b9fa65e2cc235040bb68513ce033b29b718cf939196e54d3a15be8eba790496450758cdbe7f4faaab62da9603e09d566594eea410049c63d677fe624ae5d17eb733f23a0610d27d3241d75678aef7879"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "37496f2946ea81cfc8ba88269744731bd35a3aea62805f"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "e0d1e0817c4fcad956e6cde7449ff98ef61298dcca93d11eb80c752c2aacf45bf4f6568ff5b581dba281e4721b4b1f0f8b442307f6f5861af62d7a2eb1d96993781611979773f2aa671be229210288b455ade06d88bbe19d117223cd27aa5992e745538ccc73556479341a451f15fcb7b8d8b3753910c1a24b38946ee7b8cb5248f169d04a1bc0db5be4d194592346fd1e0c42204323348f425c27a08aaf99fc1dff37e87d48324c0ab426087608c4ba034e55ff1c7a275b7d46bfe9333656d6afbdf9e419f39b00ad003b791c99"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "1e03138bfc2282c4d9f04fa87344b4627ce755f106df6c9f84a188f07ae7d2787763c9029a017a24db8ff644bf22adeec730d9c520a2509a57c6d381cee891b203e1623b0fc28e88cf5219ad8c44eb7ba1cbb7f4604bba9c87bb4c6faacf47f5c4fa19be48226941347b5c0738d0a706d951a9ec76131f6872fd42588bc0b252a86a9616adebfb9271457e0d1325f0c5beb8ef6ee9e07f8fef7d840d83358b6288426559323d1baef5b3ffee2a2add0916ddb7c3e23b6d5a"}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0da46c5a78abacd84f807d2654b941c96c273508a9966d23061f793390b3e5ca1399379170afeceabaf607bc28f918771409c6c5c1c87cb2994d4ec68926fbc723056435554b687deafec6a96af3d4920e5a7f396f91d5cc16ba7ed35531749695f51de53991d239920710109ac209e83ba51ad24cb5a92b4bde75501bd12cb31c57a5f5da39032a77b6f3a5b1158118aecf1a83c887e96cd97afb0f75ba0e9a6bbfa0bf411e7e4fc33452b5e5c760c1079164ed41033f18eb23ca5a13a17a53"}]}, @NL80211_ATTR_BEACON_TAIL={0x15e, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x40, 0x7}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xcc, 0x9, 0x3, @device_b, 0x3, @device_b, 0x7fff, 0x6eca, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1ac}, {{}, @device_a, 0x1}, {{}, @device_a, 0xa7}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x40, 0x390, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x5}}, @perr={0x84, 0xef, {0x3f, 0xf, [@ext={{}, @device_a, 0x401, @broadcast}, @ext={{}, @device_a, 0x2, @device_b, 0xe}, @not_ext={{}, @device_a, 0x4, "", 0x2a}, @ext={{}, @device_b, 0x6, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x8000, "", 0x3a}, @ext={{}, @device_a, 0x7ff, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_a, 0x38}, @not_ext={{}, @device_b, 0x10001, "", 0x3f}, @not_ext={{}, @device_a, 0x8, "", 0x9}, @not_ext={{}, @broadcast, 0x83, "", 0x2c}, @not_ext={{}, @device_b, 0x2, "", 0xd}, @ext={{}, @device_b, 0x3ff, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xc}, @not_ext={{}, @device_b, 0xd06, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x17}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0xa, 0x49}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x3, 0x4, @device_b, 0x1, 0x1, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb59, "ec3e83d4a123", @short="8d9f0d18f957a2e9"}}, @link_id={0x65, 0x12, {@from_mac}}, @random_vendor={0xdd, 0x66, "3d9544202c0a8a62210000e352c7c523e6b89a73c4ee942352429998e4265edafc4e381ba0b10273843784ee0bbb9c16bb7c5f700b872a214b217d52bc9816675f75e444a0cba1366905cef5ade1fe6090c75633add7fea7f66a0023cd7bc39803d5240dae0f"}]}, @NL80211_ATTR_PROBE_RESP={0x434, 0x91, "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"}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x20008002}, 0x4854) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (rerun: 32) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async, rerun: 32) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f00000000c0)) (rerun: 32) 08:18:17 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)={0x4e, 0xc, &(0x7f0000000380)="ed1deeec7dea4c254bfce9e4cd48fd9c5a5fd81d688a6703384738005938190dc8934d0e573b1c99d151cb2b428f4c42aae5627ca2d90039e577dbe844a9f40ef1df0cb195892bbbd26a887c5646621c462aa41d7067b603942944f2627a87a1855d2ccd5cde6047e6074980c1dae9aed01bcbb8c8b51648f16a11ba9f78d336f7fbadae6f27eabd2b2acbe9a62994aab17cc45a18f7d32475f2a414cbb86f8fabb1c0eca6807bd6ad39900ce804af466578bb0e5fc975bf6afa222e27ad5349808d101ea5b790ec79ed83aea23c4f9177fd083bd78aec48c5b1bf4ff99f22ccf1eed0670bc94d1679f11f37311782c89a10611c09e9ac059f385351232451162bdd80e38c69fa0205ea5c7efb9127930bb5f037b93614e96cd6b414b01569f64e49300b330d3e6e3840b01f2a4f1141aff2975d7f5b2f717db45bba30cabaae2175f6bbc11f5407a516bafb19b2e3ed0c2ac7aa036305cc0422e24caee378e141e28c398fb9c444c2dfdab6f5700c2e0f7ff047c9f62755d7ed6a126e457add397c8fe64424bc448ff66c72582e681e8a6fda84b27c2c7ab1d8dece1ed5cb7b9f9c7cd666413918706c783e9c285b50703b63bad95e803693c9dce92b417cd978fe94691525ea2943e0cc0296d7086f3164497287521d624f6ac3d98476d0e96bdb56832251abfa62a29602468b443cbfd4b2f0c9eca13bdd57b2cda59f80484b8ed22a07c5c0f9d5964257de342c29c89ba5b468438bdf72d57a0ef70f9d82e8c7b8cdc7198a921247b65e49fe88cdae7c0b0aef116ffee091ef0bb36e470537643a4badbe8f9bc4d123e0055022854638b516fafd98bb1fb81e6db03305d10afa1745954f8850c8ee06af94ac7fd2401a00f4c3f7bcfd8bfbe034ee0f7dd5c15c8d4882e68ff9a7a218aca2ba8725c29bf932bf445ea2bb6bdfb11c4c3c59fd96216f0edd38fee53a54351481f212a544b9ed3d1d44ce41b45fdab823cae0ae9d09bf993aa6663ddd4a9ec315ef4df544b65c1e2b6edb93559a6b7b6a0eff6adf13b9997110498d1a536a03182082662f356f7af57520ed06b761bab51befed80c0587044c24e756e639ad155e6e6c0079d32f47c852bf3f7c56a04317eadb7d8b94b6cf92f05ccf6831c4a46a11480f1028f58b3625044d197b0fe6ccb7abb7ee316d43c28e9f000c821233637e1169881433459c32fd41722460456664d62c71b427ff4009da67b361afed8c61186fb32d17baa38f5277d03b7c5fea2ce1c712533010265f43d3c1b0a8300512dc859b90da4b2570cad035d49775c68a99bb957ba51134c03b87666f863ff394884c54124d313aa3d20c78603188c6234f4317d49a6026107ad1c6b544ac551d9609fe4d3b6c08f7d54a8efb8e33ef329c9842afb80da6ffed200c7f399e489986f4463c535c5ecc1226be9723fcf93c0"}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x100, 0x3, 0x6, 0xaa, 0x7, 0xce}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x80800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0xfff7, "4e568f"}, 0x6) 08:18:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) 08:18:17 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)={0x4e, 0xc, &(0x7f0000000380)="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"}) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:17 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)={0x4e, 0xc, &(0x7f0000000380)="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"}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)={0x4e, 0xc, &(0x7f0000000380)="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"}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:18:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) (async) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0xffffffffffffffff, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:18:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) 08:18:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xfffffeac, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x1040, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000002c0)={0x1f, 0x0, 0x9, 0x101, 0x7fff, 0x9, 0x8000}) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 08:18:17 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x1800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xa3c, r4, 0xa09, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x36c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "ee444b69eef8489c4111d222240283e0af47247b845ecf42e4502f348d4bcf0d6c2255d9b3f04d450efb76f104cec4e693b093eaf172710555a1a3a70140ef35c6531a8548e9781c3a9c0f5debd07c6aafe8cc307343ab5fe515c58561dee1aaf8d8a9e11ae8ac13614e14287ca0e006cffe4620345d74c5b4c7a847a02035538d649352d02417660b7f1b62b067d0e9c24c8dd13c99e84f4bc61a6b7d49d0f337b9fa65e2cc235040bb68513ce033b29b718cf939196e54d3a15be8eba790496450758cdbe7f4faaab62da9603e09d566594eea410049c63d677fe624ae5d17eb733f23a0610d27d3241d75678aef7879"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "37496f2946ea81cfc8ba88269744731bd35a3aea62805f"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "e0d1e0817c4fcad956e6cde7449ff98ef61298dcca93d11eb80c752c2aacf45bf4f6568ff5b581dba281e4721b4b1f0f8b442307f6f5861af62d7a2eb1d96993781611979773f2aa671be229210288b455ade06d88bbe19d117223cd27aa5992e745538ccc73556479341a451f15fcb7b8d8b3753910c1a24b38946ee7b8cb5248f169d04a1bc0db5be4d194592346fd1e0c42204323348f425c27a08aaf99fc1dff37e87d48324c0ab426087608c4ba034e55ff1c7a275b7d46bfe9333656d6afbdf9e419f39b00ad003b791c99"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "1e03138bfc2282c4d9f04fa87344b4627ce755f106df6c9f84a188f07ae7d2787763c9029a017a24db8ff644bf22adeec730d9c520a2509a57c6d381cee891b203e1623b0fc28e88cf5219ad8c44eb7ba1cbb7f4604bba9c87bb4c6faacf47f5c4fa19be48226941347b5c0738d0a706d951a9ec76131f6872fd42588bc0b252a86a9616adebfb9271457e0d1325f0c5beb8ef6ee9e07f8fef7d840d83358b6288426559323d1baef5b3ffee2a2add0916ddb7c3e23b6d5a"}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0da46c5a78abacd84f807d2654b941c96c273508a9966d23061f793390b3e5ca1399379170afeceabaf607bc28f918771409c6c5c1c87cb2994d4ec68926fbc723056435554b687deafec6a96af3d4920e5a7f396f91d5cc16ba7ed35531749695f51de53991d239920710109ac209e83ba51ad24cb5a92b4bde75501bd12cb31c57a5f5da39032a77b6f3a5b1158118aecf1a83c887e96cd97afb0f75ba0e9a6bbfa0bf411e7e4fc33452b5e5c760c1079164ed41033f18eb23ca5a13a17a53"}]}, @NL80211_ATTR_BEACON_TAIL={0x15e, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x40, 0x7}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xcc, 0x9, 0x3, @device_b, 0x3, @device_b, 0x7fff, 0x6eca, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1ac}, {{}, @device_a, 0x1}, {{}, @device_a, 0xa7}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x40, 0x390, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x5}}, @perr={0x84, 0xef, {0x3f, 0xf, [@ext={{}, @device_a, 0x401, @broadcast}, @ext={{}, @device_a, 0x2, @device_b, 0xe}, @not_ext={{}, @device_a, 0x4, "", 0x2a}, @ext={{}, @device_b, 0x6, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x8000, "", 0x3a}, @ext={{}, @device_a, 0x7ff, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_a, 0x38}, @not_ext={{}, @device_b, 0x10001, "", 0x3f}, @not_ext={{}, @device_a, 0x8, "", 0x9}, @not_ext={{}, @broadcast, 0x83, "", 0x2c}, @not_ext={{}, @device_b, 0x2, "", 0xd}, @ext={{}, @device_b, 0x3ff, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xc}, @not_ext={{}, @device_b, 0xd06, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x17}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0xa, 0x49}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x3, 0x4, @device_b, 0x1, 0x1, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb59, "ec3e83d4a123", @short="8d9f0d18f957a2e9"}}, @link_id={0x65, 0x12, {@from_mac}}, @random_vendor={0xdd, 0x66, "3d9544202c0a8a62210000e352c7c523e6b89a73c4ee942352429998e4265edafc4e381ba0b10273843784ee0bbb9c16bb7c5f700b872a214b217d52bc9816675f75e444a0cba1366905cef5ade1fe6090c75633add7fea7f66a0023cd7bc39803d5240dae0f"}]}, @NL80211_ATTR_PROBE_RESP={0x434, 0x91, "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"}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x20008002}, 0x4854) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xa3c, r4, 0xa09, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x36c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "ee444b69eef8489c4111d222240283e0af47247b845ecf42e4502f348d4bcf0d6c2255d9b3f04d450efb76f104cec4e693b093eaf172710555a1a3a70140ef35c6531a8548e9781c3a9c0f5debd07c6aafe8cc307343ab5fe515c58561dee1aaf8d8a9e11ae8ac13614e14287ca0e006cffe4620345d74c5b4c7a847a02035538d649352d02417660b7f1b62b067d0e9c24c8dd13c99e84f4bc61a6b7d49d0f337b9fa65e2cc235040bb68513ce033b29b718cf939196e54d3a15be8eba790496450758cdbe7f4faaab62da9603e09d566594eea410049c63d677fe624ae5d17eb733f23a0610d27d3241d75678aef7879"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "37496f2946ea81cfc8ba88269744731bd35a3aea62805f"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "e0d1e0817c4fcad956e6cde7449ff98ef61298dcca93d11eb80c752c2aacf45bf4f6568ff5b581dba281e4721b4b1f0f8b442307f6f5861af62d7a2eb1d96993781611979773f2aa671be229210288b455ade06d88bbe19d117223cd27aa5992e745538ccc73556479341a451f15fcb7b8d8b3753910c1a24b38946ee7b8cb5248f169d04a1bc0db5be4d194592346fd1e0c42204323348f425c27a08aaf99fc1dff37e87d48324c0ab426087608c4ba034e55ff1c7a275b7d46bfe9333656d6afbdf9e419f39b00ad003b791c99"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "1e03138bfc2282c4d9f04fa87344b4627ce755f106df6c9f84a188f07ae7d2787763c9029a017a24db8ff644bf22adeec730d9c520a2509a57c6d381cee891b203e1623b0fc28e88cf5219ad8c44eb7ba1cbb7f4604bba9c87bb4c6faacf47f5c4fa19be48226941347b5c0738d0a706d951a9ec76131f6872fd42588bc0b252a86a9616adebfb9271457e0d1325f0c5beb8ef6ee9e07f8fef7d840d83358b6288426559323d1baef5b3ffee2a2add0916ddb7c3e23b6d5a"}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0da46c5a78abacd84f807d2654b941c96c273508a9966d23061f793390b3e5ca1399379170afeceabaf607bc28f918771409c6c5c1c87cb2994d4ec68926fbc723056435554b687deafec6a96af3d4920e5a7f396f91d5cc16ba7ed35531749695f51de53991d239920710109ac209e83ba51ad24cb5a92b4bde75501bd12cb31c57a5f5da39032a77b6f3a5b1158118aecf1a83c887e96cd97afb0f75ba0e9a6bbfa0bf411e7e4fc33452b5e5c760c1079164ed41033f18eb23ca5a13a17a53"}]}, @NL80211_ATTR_BEACON_TAIL={0x15e, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x40, 0x7}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xcc, 0x9, 0x3, @device_b, 0x3, @device_b, 0x7fff, 0x6eca, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1ac}, {{}, @device_a, 0x1}, {{}, @device_a, 0xa7}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x40, 0x390, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x5}}, @perr={0x84, 0xef, {0x3f, 0xf, [@ext={{}, @device_a, 0x401, @broadcast}, @ext={{}, @device_a, 0x2, @device_b, 0xe}, @not_ext={{}, @device_a, 0x4, "", 0x2a}, @ext={{}, @device_b, 0x6, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x8000, "", 0x3a}, @ext={{}, @device_a, 0x7ff, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_a, 0x38}, @not_ext={{}, @device_b, 0x10001, "", 0x3f}, @not_ext={{}, @device_a, 0x8, "", 0x9}, @not_ext={{}, @broadcast, 0x83, "", 0x2c}, @not_ext={{}, @device_b, 0x2, "", 0xd}, @ext={{}, @device_b, 0x3ff, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xc}, @not_ext={{}, @device_b, 0xd06, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x17}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0xa, 0x49}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x3, 0x4, @device_b, 0x1, 0x1, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb59, "ec3e83d4a123", @short="8d9f0d18f957a2e9"}}, @link_id={0x65, 0x12, {@from_mac}}, @random_vendor={0xdd, 0x66, "3d9544202c0a8a62210000e352c7c523e6b89a73c4ee942352429998e4265edafc4e381ba0b10273843784ee0bbb9c16bb7c5f700b872a214b217d52bc9816675f75e444a0cba1366905cef5ade1fe6090c75633add7fea7f66a0023cd7bc39803d5240dae0f"}]}, @NL80211_ATTR_PROBE_RESP={0x434, 0x91, "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"}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x20008002}, 0x4854) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) (async) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f00000000c0)) (async) 08:18:18 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x1800) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x100, 0x3, 0x6, 0xaa, 0x7, 0xce}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x80800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0xfff7, "4e568f"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x80800) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0xfff7, "4e568f"}, 0x6) (async) 08:18:18 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x1800) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) ioctl$RTC_UIE_ON(r0, 0x7003) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) (async) 08:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x3, 0xff, 0x8, 0x8, 0x8, "a5f991feed3ba5ed33c677f1864e4abe99c876", 0x2, 0x1f}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x3, 0xff, 0x8, 0x8, 0x8, "a5f991feed3ba5ed33c677f1864e4abe99c876", 0x2, 0x1f}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x3, 0xff, 0x8, 0x8, 0x8, "a5f991feed3ba5ed33c677f1864e4abe99c876", 0x2, 0x1f}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x3, 0xff, 0x8, 0x8, 0x8, "a5f991feed3ba5ed33c677f1864e4abe99c876", 0x2, 0x1f}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xfffffeac, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x1040, 0x0) (rerun: 32) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000002c0)={0x1f, 0x0, 0x9, 0x101, 0x7fff, 0x9, 0x8000}) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 08:18:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x100, 0x3, 0x6, 0xaa, 0x7, 0xce}, 0xc) (async, rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x80800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0xfff7, "4e568f"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x80800) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0xfff7, "4e568f"}, 0x6) (async) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xf7) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) (async) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:19 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffd, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) (async) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="564f4c554d450a444947495441000000004f7677e316e29920274c696e65272030303030303030303030303030307a30303030300a5245434c45560a"], 0x3c) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x80, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 08:18:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xfffffeac, 0x80800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x1040, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000002c0)={0x1f, 0x0, 0x9, 0x101, 0x7fff, 0x9, 0x8000}) (async) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) accept4$bt_l2cap(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 08:18:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 64) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="564f4c554d450a444947495441000000004f7677e316e29920274c696e65272030303030303030303030303030307a30303030300a5245434c45560a"], 0x3c) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x80, @none}, 0xe) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) 08:18:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="564f4c554d450a444947495441000000004f7677e316e29920274c696e65272030303030303030303030303030307a30303030300a5245434c45560a"], 0x3c) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x80, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async, rerun: 64) ioctl$RTC_WIE_OFF(r3, 0x7010) (async, rerun: 64) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) (rerun: 64) 08:18:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 08:18:20 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x2f, 0xc, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x1, 0x0, 0x9, 0x80, 0x3f, 0x1, "af9f87b2"}, 0x81, 0x4, {}, 0x5}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:20 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x2f, 0xc, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x1, 0x0, 0x9, 0x80, 0x3f, 0x1, "af9f87b2"}, 0x81, 0x4, {}, 0x5}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xf7) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:18:20 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x2f, 0xc, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x1, 0x0, 0x9, 0x80, 0x3f, 0x1, "af9f87b2"}, 0x81, 0x4, {}, 0x5}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x2f, 0xc, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x1, 0x0, 0x9, 0x80, 0x3f, 0x1, "af9f87b2"}, 0x81, 0x4, {}, 0x5}) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4}, 0x10) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffd, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, {0x8, 0x6, 0x6, 0x200}}) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x2, 0x2}, 0xe) 08:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, {0x8, 0x6, 0x6, 0x200}}) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x2, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, {0x8, 0x6, 0x6, 0x200}}) (async) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x2, 0x2}, 0xe) (async) 08:18:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x1}, 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x2aa, 0xc, 0x4, 0x0, 0x80, {r3, r4/1000+10000}, {0x2, 0x0, 0xff, 0x81, 0x4, 0x80, "b4cd1941"}, 0x10001, 0x4, {&(0x7f0000000180)=[{0x7fff, 0xffffffff, {r1}, 0x7}, {0x8, 0x10000, {r5}, 0x7fff}]}, 0xffffff91, 0x0, r6}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x8ee8, 0x0, 0x7, 0xce, 0x1, 0xfb, 0x92}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$RTC_VL_CLR(r7, 0x7014) 08:18:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, {0x8, 0x6, 0x6, 0x200}}) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x2, 0x2}, 0xe) 08:18:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x2a, 0x0, 0x800, 0x19, 0x6, 0x1, 0x6, 0x137}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) 08:18:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 08:18:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x1}, 0xe) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x2aa, 0xc, 0x4, 0x0, 0x80, {r3, r4/1000+10000}, {0x2, 0x0, 0xff, 0x81, 0x4, 0x80, "b4cd1941"}, 0x10001, 0x4, {&(0x7f0000000180)=[{0x7fff, 0xffffffff, {r1}, 0x7}, {0x8, 0x10000, {r5}, 0x7fff}]}, 0xffffff91, 0x0, r6}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x8ee8, 0x0, 0x7, 0xce, 0x1, 0xfb, 0x92}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$RTC_VL_CLR(r7, 0x7014) 08:18:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x2a, 0x0, 0x800, 0x19, 0x6, 0x1, 0x6, 0x137}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 64) ioctl$RTC_PIE_ON(r2, 0x7005) (rerun: 64) 08:18:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xf7) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:18:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7, 0x1}, 0xe) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) (async) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x2aa, 0xc, 0x4, 0x0, 0x80, {r3, r4/1000+10000}, {0x2, 0x0, 0xff, 0x81, 0x4, 0x80, "b4cd1941"}, 0x10001, 0x4, {&(0x7f0000000180)=[{0x7fff, 0xffffffff, {r1}, 0x7}, {0x8, 0x10000, {r5}, 0x7fff}]}, 0xffffff91, 0x0, r6}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x8ee8, 0x0, 0x7, 0xce, 0x1, 0xfb, 0x92}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$RTC_VL_CLR(r7, 0x7014) 08:18:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffd, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x2a, 0x0, 0x800, 0x19, 0x6, 0x1, 0x6, 0x137}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x2a, 0x0, 0x800, 0x19, 0x6, 0x1, 0x6, 0x137}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$RTC_UIE_OFF(r0, 0x7004) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) ioctl$RTC_WIE_OFF(r0, 0x7010) (async) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$RTC_PIE_ON(r2, 0x7005) (async) 08:18:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x9, 0x2}, 0xe) 08:18:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x280001, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x8, 0x3f, 0x101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) socketpair(0x9, 0x4, 0x90, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 08:18:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x280001, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x8, 0x3f, 0x101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) socketpair(0x9, 0x4, 0x90, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 08:18:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffa, @none, 0x1, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @any, 0x1, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x91}, 0xfffffffffffffd42) 08:18:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x280001, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x8, 0x3f, 0x101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) socketpair(0x9, 0x4, 0x90, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 08:18:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) (async) 08:18:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffa, @none, 0x1, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @any, 0x1, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x91}, 0xfffffffffffffd42) 08:18:21 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x20, 0x2, "f0a72f21f31da435bc4ce9c5b1afbb7481b81f7ee7ce63b03ca2ffc86fe68a2b", 0x0, 0x5, 0x40, 0x0, 0x101}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x2, 0x0, '\x00', {0x0, @reserved}}) 08:18:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffa, @none, 0x1, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @any, 0x1, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x91}, 0xfffffffffffffd42) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffa, @none, 0x1, 0x2}, 0xe) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @any, 0x1, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none, 0x91}, 0xfffffffffffffd42) (async) 08:18:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @fixed}, 0xe) accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x8, 0x800) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x20, 0x2, "f0a72f21f31da435bc4ce9c5b1afbb7481b81f7ee7ce63b03ca2ffc86fe68a2b", 0x0, 0x5, 0x40, 0x0, 0x101}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000080), 0x4880) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x20, 0x2, "f0a72f21f31da435bc4ce9c5b1afbb7481b81f7ee7ce63b03ca2ffc86fe68a2b", 0x0, 0x5, 0x40, 0x0, 0x101}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x9, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x9, 0x2}, 0xe) (async) 08:18:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:22 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x20, 0x2, "f0a72f21f31da435bc4ce9c5b1afbb7481b81f7ee7ce63b03ca2ffc86fe68a2b", 0x0, 0x5, 0x40, 0x0, 0x101}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) socketpair(0x1, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) accept4$bt_l2cap(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x800) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0)=0x2, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000380)={0x6, 0x2, 0x5, 0x20, 0xfffffff7, 0x4, 0x6}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000440)=0x6) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x24) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) socketpair(0x1, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) accept4$bt_l2cap(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x800) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0)=0x2, 0x4) (async) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000380)={0x6, 0x2, 0x5, 0x20, 0xfffffff7, 0x4, 0x6}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000440)=0x6) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x24) 08:18:22 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000", @ANYRESOCT], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000040), 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) (async, rerun: 32) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) (async, rerun: 32) socketpair(0x1, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff}) accept4$bt_l2cap(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x800) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0)=0x2, 0x4) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) (async) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000380)={0x6, 0x2, 0x5, 0x20, 0xfffffff7, 0x4, 0x6}) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000440)=0x6) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x24) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) pipe2(&(0x7f0000000140), 0x800) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4}, 0x2) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xfff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) [ 2998.254504] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:18:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x2, 0x0, '\x00', {0x0, @reserved}}) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) pipe2(&(0x7f0000000140), 0x800) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4}, 0x2) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xfff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async) pipe2(&(0x7f0000000140), 0x800) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4}, 0x2) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xfff, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @fixed}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x8, 0x800) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) pipe2(&(0x7f0000000140), 0x800) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4}, 0x2) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xfff, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async) pipe2(&(0x7f0000000140), 0x800) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4}, 0x2) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xfff, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x9, 0x2}, 0xe) 08:18:22 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000", @ANYRESOCT], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000040), 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000", @ANYRESOCT], 0x28}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000040), 0xe) (async) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) [ 2999.114251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:18:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x2, 0x0, '\x00', {0x0, @reserved}}) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) [ 2999.176343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:18:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xff, @fixed}, 0xe) accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x8, 0x800) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (rerun: 64) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:23 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x20000, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) 08:18:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) 08:18:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:24 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000", @ANYRESOCT], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000040), 0xe) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (rerun: 32) [ 2999.960200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:18:24 executing program 5: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000380)={0x1, "f434c51d18a1da7bc0122ef0cc45bc49eac46db5882e85e9e9764357b303722c", 0x3, 0x1}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getpeername$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) getpeername$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) getpeername$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0x6) socketpair(0x2, 0x2, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000040), 0x84000) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x100, 0x2}, 0x1) 08:18:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0x6) (async) socketpair(0x2, 0x2, 0x0, &(0x7f0000000080)) (async) pipe2(&(0x7f0000000040), 0x84000) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x100, 0x2}, 0x1) 08:18:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x20000, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0x6) (async) socketpair(0x2, 0x2, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000040), 0x84000) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x100, 0x2}, 0x1) 08:18:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x459c6a0c9846993e, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:18:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:18:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) 08:18:25 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x4, "9125a5"}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x98c, @none, 0x0, 0x2}, 0xe) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x9, 0x1, 0x2, 0x1000, 0x10000, 0x3f, 0x4, 0x9, 0x20000, 0x6, 0x9876, 0x1de4, 0x101, 0x4, 0x2, {0xdb8a, 0xfe52}, 0x4}}) 08:18:25 executing program 5: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000380)={0x1, "f434c51d18a1da7bc0122ef0cc45bc49eac46db5882e85e9e9764357b303722c", 0x3, 0x1}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getpeername$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) getpeername$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) getpeername$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000380)={0x1, "f434c51d18a1da7bc0122ef0cc45bc49eac46db5882e85e9e9764357b303722c", 0x3, 0x1}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) getpeername$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) (async) getpeername$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) (async) getpeername$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) (async) 08:18:25 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x4, "9125a5"}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x98c, @none, 0x0, 0x2}, 0xe) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x9, 0x1, 0x2, 0x1000, 0x10000, 0x3f, 0x4, 0x9, 0x20000, 0x6, 0x9876, 0x1de4, 0x101, 0x4, 0x2, {0xdb8a, 0xfe52}, 0x4}}) 08:18:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) 08:18:25 executing program 3: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x4, "9125a5"}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x98c, @none, 0x0, 0x2}, 0xe) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x9, 0x1, 0x2, 0x1000, 0x10000, 0x3f, 0x4, 0x9, 0x20000, 0x6, 0x9876, 0x1de4, 0x101, 0x4, 0x2, {0xdb8a, 0xfe52}, 0x4}}) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x4, "9125a5"}, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000040)) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x98c, @none, 0x0, 0x2}, 0xe) (async) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x9, 0x1, 0x2, 0x1000, 0x10000, 0x3f, 0x4, 0x9, 0x20000, 0x6, 0x9876, 0x1de4, 0x101, 0x4, 0x2, {0xdb8a, 0xfe52}, 0x4}}) (async) 08:18:25 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x20000, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 08:18:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x459c6a0c9846993e, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 08:18:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) (async) 08:18:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x2c, 0x80000, 0x184, &(0x7f0000000080)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x0, 0x0, 0x0, {0x0, @vbi}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x4e4a, "806a06"}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x23a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1306}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 08:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x2c, 0x80000, 0x184, &(0x7f0000000080)) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x0, 0x0, 0x0, {0x0, @vbi}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x4e4a, "806a06"}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x23a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1306}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socketpair(0x2c, 0x80000, 0x184, &(0x7f0000000080)) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x0, 0x0, 0x0, {0x0, @vbi}}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x4e4a, "806a06"}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x23a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1306}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) (async) 08:18:26 executing program 5: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000380)={0x1, "f434c51d18a1da7bc0122ef0cc45bc49eac46db5882e85e9e9764357b303722c", 0x3, 0x1}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getpeername$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async, rerun: 32) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x0) getpeername$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) getpeername$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) 08:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socketpair(0x2c, 0x80000, 0x184, &(0x7f0000000080)) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x0, 0x0, 0x0, {0x0, @vbi}}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x4e4a, "806a06"}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x23a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1306}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 08:18:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:18:26 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x7cd2bcb8, "47e6bfc7d37f5421977d229212b7a057406f4bf4f1326555782a91aa5fd7b3ef", 0x7}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0x401}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:26 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x7cd2bcb8, "47e6bfc7d37f5421977d229212b7a057406f4bf4f1326555782a91aa5fd7b3ef", 0x7}) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x459c6a0c9846993e, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 32) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (rerun: 32) 08:18:26 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x7cd2bcb8, "47e6bfc7d37f5421977d229212b7a057406f4bf4f1326555782a91aa5fd7b3ef", 0x7}) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 08:18:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 08:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x20000, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) 08:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) (async) 08:18:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x2}, 0x47) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x1, @any, 0x8, 0x1}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x1, 0x4) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x3) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) (async) 08:18:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0x401}, 0xe) (rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x200, 0x9c, 0x5, 0x1f, 0x19, 0x3f}, 0xc) 08:18:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x3}, 0xe) 08:18:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x3}, 0xe) (async) 08:18:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x3}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) (async) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @any, 0x3}, 0xe) (async) 08:18:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2536, "b14dbf"}, 0x6) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @none, 0xfffc, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0xe45, "e400"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) accept4$bt_l2cap(r0, 0x0, &(0x7f00000002c0), 0x100800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0x6, 0x0, 0x2}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80800) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0xd, 0x2c, 0x10, 0x10, 0xb, 0xffffffff, 0x5, 0x78, 0x1}}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x800, 0x2000, "7611a455513e42cd3bb3934f5f7b3ff2addb0acac60a017f", {0x1, 0x8001}, 0x9}) 08:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xb) 08:18:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2536, "b14dbf"}, 0x6) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @none, 0xfffc, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2536, "b14dbf"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @none, 0xfffc, 0x2}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x2}, 0x47) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x1, @any, 0x8, 0x1}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x3) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2536, "b14dbf"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @none, 0xfffc, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) (async, rerun: 64) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0x401}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 08:18:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x200, 0x9c, 0x5, 0x1f, 0x19, 0x3f}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x200, 0x9c, 0x5, 0x1f, 0x19, 0x3f}, 0xc) (async) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x39, 0xb8, 0x401, 0x4, 0x8, 0x0, 0xffff}, 0xc) 08:18:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4880) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x20, 0x2, "f0a72f21f31da435bc4ce9c5b1afbb7481b81f7ee7ce63b03ca2ffc86fe68a2b", 0x0, 0x5, 0x40, 0x0, 0x101}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @any, 0xfffe}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, {0x8, 0x6, 0x6, 0x200}}) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @none, 0x2, 0x2}, 0xe) 08:18:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0xe45, "e400"}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) accept4$bt_l2cap(r0, 0x0, &(0x7f00000002c0), 0x100800) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0x6, 0x0, 0x2}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80800) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0xd, 0x2c, 0x10, 0x10, 0xb, 0xffffffff, 0x5, 0x78, 0x1}}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x800, 0x2000, "7611a455513e42cd3bb3934f5f7b3ff2addb0acac60a017f", {0x1, 0x8001}, 0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0xe45, "e400"}, 0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f00000002c0), 0x100800) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0x6, 0x0, 0x2}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80800) (async) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0xd, 0x2c, 0x10, 0x10, 0xb, 0xffffffff, 0x5, 0x78, 0x1}}) (async) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x800, 0x2000, "7611a455513e42cd3bb3934f5f7b3ff2addb0acac60a017f", {0x1, 0x8001}, 0x9}) (async) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:28 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x2}, 0x47) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x1, @any, 0x8, 0x1}, 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x1, 0x4) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x3) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) 08:18:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7f, @any, 0x0, 0x2}, 0xe) 08:18:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x200, 0x9c, 0x5, 0x1f, 0x19, 0x3f}, 0xc) 08:18:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0xe45, "e400"}, 0x6) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (rerun: 32) accept4$bt_l2cap(r0, 0x0, &(0x7f00000002c0), 0x100800) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000280)={0x6, 0x0, 0x2}) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80800) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0xd, 0x2c, 0x10, 0x10, 0xb, 0xffffffff, 0x5, 0x78, 0x1}}) (async) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x800, 0x2000, "7611a455513e42cd3bb3934f5f7b3ff2addb0acac60a017f", {0x1, 0x8001}, 0x9}) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 08:18:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x39, 0xb8, 0x401, 0x4, 0x8, 0x0, 0xffff}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x39, 0xb8, 0x401, 0x4, 0x8, 0x0, 0xffff}, 0xc) (async) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)) 08:18:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) 08:18:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x39, 0xb8, 0x401, 0x4, 0x8, 0x0, 0xffff}, 0xc) (rerun: 32) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) 08:18:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4840) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x2, "45ede4"}, 0x6) syz_open_pts(r4, 0x8a00) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff9, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) 08:18:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7f, @any, 0x0, 0x2}, 0xe) 08:18:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none}, 0xe) 08:18:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x808c0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x990000, 0x100, 0x5, r2, 0x0, &(0x7f00000000c0)={0x9a0912, 0x5, '\x00', @value64=0x2}}) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000400), 0x0) 08:18:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400), 0x0) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) 08:18:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400), 0x0) 08:18:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4840) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x2, "45ede4"}, 0x6) (async) syz_open_pts(r4, 0x8a00) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff9, 0x2}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 08:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7f, @any, 0x0, 0x2}, 0xe) 08:18:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none}, 0xe) 08:18:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x808c0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x990000, 0x100, 0x5, r2, 0x0, &(0x7f00000000c0)={0x9a0912, 0x5, '\x00', @value64=0x2}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) pipe2(&(0x7f0000000080), 0x808c0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x990000, 0x100, 0x5, r2, 0x0, &(0x7f00000000c0)={0x9a0912, 0x5, '\x00', @value64=0x2}}) (async) 08:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 08:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:30 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) (async, rerun: 64) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x4840) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x2, "45ede4"}, 0x6) (async) syz_open_pts(r4, 0x8a00) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfff9, 0x2}, 0xe) (async, rerun: 32) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 08:18:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x4, 0x4fc, 0x51d, 0x6, 0x50, 0x4, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100), 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x9, 0x9, 0x8, 0x0, 0xfc, 0x4}, 0xc) 08:18:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none}, 0xe) (async) 08:18:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x808c0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x990000, 0x100, 0x5, r2, 0x0, &(0x7f00000000c0)={0x9a0912, 0x5, '\x00', @value64=0x2}}) 08:18:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 08:18:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) 08:18:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:18:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 08:18:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:32 executing program 0: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x4, 0x4fc, 0x51d, 0x6, 0x50, 0x4, 0x1}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100), 0x2) (async, rerun: 64) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x9, 0x9, 0x8, 0x0, 0xfc, 0x4}, 0xc) 08:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:18:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:18:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 08:18:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) pipe2(&(0x7f0000000400), 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (rerun: 32) 08:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none}, 0xe) 08:18:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) timerfd_create(0x6, 0x80800) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2, "44a353"}, 0x6) 08:18:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:33 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x4, 0x4fc, 0x51d, 0x6, 0x50, 0x4, 0x1}) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100), 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x9, 0x9, 0x8, 0x0, 0xfc, 0x4}, 0xc) 08:18:33 executing program 0: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) 08:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) 08:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x80, "47b330"}, 0x6) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) socketpair(0x27, 0x800, 0x3fe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000540)=[{'MONITOR', @val={' \'', 'CD Capture Switch'}}, {'TREBLE', @void}, {'RADIO', @val={' \'', 'Synth Capture Switch'}}, {'BASS', @val={' \'', 'Master Capture'}}, {'RECLEV', @val={' \'', 'Mic Capture'}}, {'PHONEIN', @void}, {'RADIO', @val={' \'', 'Mic'}}, {'LINE', @void}], 0xed) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 08:18:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xa3c, r4, 0xa09, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x36c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf5, 0x3, "ee444b69eef8489c4111d222240283e0af47247b845ecf42e4502f348d4bcf0d6c2255d9b3f04d450efb76f104cec4e693b093eaf172710555a1a3a70140ef35c6531a8548e9781c3a9c0f5debd07c6aafe8cc307343ab5fe515c58561dee1aaf8d8a9e11ae8ac13614e14287ca0e006cffe4620345d74c5b4c7a847a02035538d649352d02417660b7f1b62b067d0e9c24c8dd13c99e84f4bc61a6b7d49d0f337b9fa65e2cc235040bb68513ce033b29b718cf939196e54d3a15be8eba790496450758cdbe7f4faaab62da9603e09d566594eea410049c63d677fe624ae5d17eb733f23a0610d27d3241d75678aef7879"}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "37496f2946ea81cfc8ba88269744731bd35a3aea62805f"}, @NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "e0d1e0817c4fcad956e6cde7449ff98ef61298dcca93d11eb80c752c2aacf45bf4f6568ff5b581dba281e4721b4b1f0f8b442307f6f5861af62d7a2eb1d96993781611979773f2aa671be229210288b455ade06d88bbe19d117223cd27aa5992e745538ccc73556479341a451f15fcb7b8d8b3753910c1a24b38946ee7b8cb5248f169d04a1bc0db5be4d194592346fd1e0c42204323348f425c27a08aaf99fc1dff37e87d48324c0ab426087608c4ba034e55ff1c7a275b7d46bfe9333656d6afbdf9e419f39b00ad003b791c99"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "1e03138bfc2282c4d9f04fa87344b4627ce755f106df6c9f84a188f07ae7d2787763c9029a017a24db8ff644bf22adeec730d9c520a2509a57c6d381cee891b203e1623b0fc28e88cf5219ad8c44eb7ba1cbb7f4604bba9c87bb4c6faacf47f5c4fa19be48226941347b5c0738d0a706d951a9ec76131f6872fd42588bc0b252a86a9616adebfb9271457e0d1325f0c5beb8ef6ee9e07f8fef7d840d83358b6288426559323d1baef5b3ffee2a2add0916ddb7c3e23b6d5a"}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0da46c5a78abacd84f807d2654b941c96c273508a9966d23061f793390b3e5ca1399379170afeceabaf607bc28f918771409c6c5c1c87cb2994d4ec68926fbc723056435554b687deafec6a96af3d4920e5a7f396f91d5cc16ba7ed35531749695f51de53991d239920710109ac209e83ba51ad24cb5a92b4bde75501bd12cb31c57a5f5da39032a77b6f3a5b1158118aecf1a83c887e96cd97afb0f75ba0e9a6bbfa0bf411e7e4fc33452b5e5c760c1079164ed41033f18eb23ca5a13a17a53"}]}, @NL80211_ATTR_BEACON_TAIL={0x15e, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x40, 0x7}}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xcc, 0x9, 0x3, @device_b, 0x3, @device_b, 0x7fff, 0x6eca, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1ac}, {{}, @device_a, 0x1}, {{}, @device_a, 0xa7}]}}, @ibss={0x6, 0x2, 0x4}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x40, 0x390, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x5}}, @perr={0x84, 0xef, {0x3f, 0xf, [@ext={{}, @device_a, 0x401, @broadcast}, @ext={{}, @device_a, 0x2, @device_b, 0xe}, @not_ext={{}, @device_a, 0x4, "", 0x2a}, @ext={{}, @device_b, 0x6, @broadcast, 0x7}, @not_ext={{}, @device_b, 0x8000, "", 0x3a}, @ext={{}, @device_a, 0x7ff, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_a, 0x38}, @not_ext={{}, @device_b, 0x10001, "", 0x3f}, @not_ext={{}, @device_a, 0x8, "", 0x9}, @not_ext={{}, @broadcast, 0x83, "", 0x2c}, @not_ext={{}, @device_b, 0x2, "", 0xd}, @ext={{}, @device_b, 0x3ff, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xc}, @not_ext={{}, @device_b, 0xd06, "", 0x25}, @not_ext={{}, @device_a, 0x4, "", 0x17}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0xa, 0x49}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x3, 0x4, @device_b, 0x1, 0x1, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb59, "ec3e83d4a123", @short="8d9f0d18f957a2e9"}}, @link_id={0x65, 0x12, {@from_mac}}, @random_vendor={0xdd, 0x66, "3d9544202c0a8a62210000e352c7c523e6b89a73c4ee942352429998e4265edafc4e381ba0b10273843784ee0bbb9c16bb7c5f700b872a214b217d52bc9816675f75e444a0cba1366905cef5ade1fe6090c75633add7fea7f66a0023cd7bc39803d5240dae0f"}]}, @NL80211_ATTR_PROBE_RESP={0x434, 0x91, "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"}]}, 0xa3c}, 0x1, 0x0, 0x0, 0x20008002}, 0x4854) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f00000000c0)) 08:18:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) 08:18:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) timerfd_create(0x6, 0x80800) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2, "44a353"}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) timerfd_create(0x6, 0x80800) (async) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2, "44a353"}, 0x6) (async) 08:18:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) (async) 08:18:34 executing program 0: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) 08:18:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0), 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:18:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x9, @none, 0x5}, 0xe) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) accept$unix(r1, 0x0, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 08:18:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x6}, 0xe) 08:18:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) (async) timerfd_create(0x6, 0x80800) (async, rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) (rerun: 32) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x2, "44a353"}, 0x6) 08:18:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) 08:18:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xfd82) 08:18:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0), 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 08:18:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xfd82) 08:18:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xfd82) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xfd82) (async) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @none, 0x0, 0x2}, 0xe) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x40, 0xff, 0x7fff, 0x3, 0x9, 0x25, 0x1}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x6}, 0xe) 08:18:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1}, 0xe) 08:18:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0), 0x2) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0), 0x2) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) pipe2(&(0x7f0000000400), 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0xb20, 0xd, 0x3f, 0x6, 0xf3, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) 08:18:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x1f, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0x1a) [ 3011.875222] ================================================================== [ 3011.882610] BUG: KASAN: use-after-free in __lock_acquire+0x2cb4/0x3ff0 [ 3011.889257] Read of size 8 at addr ffff88808ba357e0 by task kworker/0:1/10922 [ 3011.896504] [ 3011.898181] CPU: 0 PID: 10922 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 3011.905787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3011.915134] Workqueue: events l2cap_chan_timeout [ 3011.919871] Call Trace: [ 3011.922454] dump_stack+0x1fc/0x2ef [ 3011.926069] print_address_description.cold+0x54/0x219 [ 3011.931335] kasan_report_error.cold+0x8a/0x1b9 [ 3011.935987] ? __lock_acquire+0x2cb4/0x3ff0 [ 3011.940294] __asan_report_load8_noabort+0x88/0x90 [ 3011.945207] ? __lock_acquire+0x2cb4/0x3ff0 [ 3011.949510] __lock_acquire+0x2cb4/0x3ff0 [ 3011.953650] ? ret_from_fork+0x24/0x30 [ 3011.957543] ? mark_held_locks+0xf0/0xf0 [ 3011.961587] ? mark_held_locks+0xf0/0xf0 [ 3011.965637] ? ret_from_fork+0x24/0x30 [ 3011.969511] ? ret_from_fork+0x24/0x30 [ 3011.973386] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 3011.978776] ? save_trace+0xd6/0x290 [ 3011.982482] lock_acquire+0x170/0x3c0 [ 3011.986266] ? lock_sock_nested+0x3b/0x110 [ 3011.990503] _raw_spin_lock_bh+0x2f/0x40 [ 3011.994559] ? lock_sock_nested+0x3b/0x110 [ 3011.998781] lock_sock_nested+0x3b/0x110 [ 3012.002823] l2cap_sock_teardown_cb+0xa0/0x6d0 [ 3012.007404] ? rcu_nmi_exit+0xb3/0x180 [ 3012.011284] l2cap_chan_close+0x377/0x950 [ 3012.015438] ? __set_monitor_timer+0x200/0x200 [ 3012.020009] ? __lock_acquire+0x2853/0x3ff0 [ 3012.024312] ? check_preemption_disabled+0x41/0x280 [ 3012.029313] l2cap_chan_timeout+0x17e/0x2f0 [ 3012.033637] process_one_work+0x864/0x1570 [ 3012.037869] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3012.042519] worker_thread+0x64c/0x1130 [ 3012.046473] ? __kthread_parkme+0x133/0x1e0 [ 3012.050774] ? process_one_work+0x1570/0x1570 [ 3012.055263] kthread+0x33f/0x460 [ 3012.058636] ? kthread_park+0x180/0x180 [ 3012.062593] ret_from_fork+0x24/0x30 [ 3012.066285] [ 3012.067899] Allocated by task 11585: [ 3012.071591] __kmalloc+0x15a/0x3c0 [ 3012.075109] sk_prot_alloc+0x1e2/0x2d0 [ 3012.078974] sk_alloc+0x36/0xec0 [ 3012.082347] l2cap_sock_alloc.constprop.0+0x31/0x210 [ 3012.087444] l2cap_sock_create+0x123/0x1f0 [ 3012.091682] bt_sock_create+0x154/0x2a0 [ 3012.095643] __sock_create+0x3d8/0x740 [ 3012.099513] __sys_socket+0xef/0x200 [ 3012.103214] __x64_sys_socket+0x6f/0xb0 [ 3012.107178] do_syscall_64+0xf9/0x620 [ 3012.110964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3012.116150] [ 3012.117755] Freed by task 11584: [ 3012.121113] kfree+0xcc/0x210 [ 3012.124215] __sk_destruct+0x684/0x8a0 [ 3012.128083] __sk_free+0x165/0x3b0 [ 3012.131620] sk_free+0x3b/0x50 [ 3012.134794] l2cap_sock_kill.part.0+0x124/0x150 [ 3012.139464] l2cap_sock_release+0x1e6/0x290 [ 3012.143772] __sock_release+0xcd/0x2a0 [ 3012.147644] sock_close+0x15/0x20 [ 3012.151099] __fput+0x2ce/0x890 [ 3012.154368] task_work_run+0x148/0x1c0 [ 3012.158242] get_signal+0x1b64/0x1f70 [ 3012.162020] do_signal+0x8f/0x1670 [ 3012.165538] exit_to_usermode_loop+0x204/0x2a0 [ 3012.170101] do_syscall_64+0x538/0x620 [ 3012.173979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3012.179144] [ 3012.180759] The buggy address belongs to the object at ffff88808ba35740 [ 3012.180759] which belongs to the cache kmalloc-2048 of size 2048 [ 3012.193578] The buggy address is located 160 bytes inside of [ 3012.193578] 2048-byte region [ffff88808ba35740, ffff88808ba35f40) [ 3012.205522] The buggy address belongs to the page: [ 3012.210432] page:ffffea00022e8d00 count:1 mapcount:0 mapping:ffff88813bff0c40 index:0xffff88808ba34ec0 compound_mapcount: 0 [ 3012.221683] flags: 0xfff00000008100(slab|head) [ 3012.226245] raw: 00fff00000008100 ffffea0002488408 ffffea000247ca88 ffff88813bff0c40 [ 3012.234109] raw: ffff88808ba34ec0 ffff88808ba34640 0000000100000001 0000000000000000 [ 3012.241966] page dumped because: kasan: bad access detected [ 3012.247652] [ 3012.249259] Memory state around the buggy address: [ 3012.254162] ffff88808ba35680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3012.261511] ffff88808ba35700: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3012.268850] >ffff88808ba35780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3012.276187] ^ [ 3012.282665] ffff88808ba35800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3012.290000] ffff88808ba35880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3012.297339] ================================================================== [ 3012.304723] Disabling lock debugging due to kernel taint [ 3012.310155] Kernel panic - not syncing: panic_on_warn set ... [ 3012.310155] [ 3012.317501] CPU: 0 PID: 10922 Comm: kworker/0:1 Tainted: G B 4.19.211-syzkaller #0 [ 3012.326499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3012.335857] Workqueue: events l2cap_chan_timeout [ 3012.340589] Call Trace: [ 3012.343176] dump_stack+0x1fc/0x2ef [ 3012.346782] panic+0x26a/0x50e [ 3012.349951] ? __warn_printk+0xf3/0xf3 [ 3012.353907] ? lock_downgrade+0x720/0x720 [ 3012.358034] ? print_shadow_for_address+0xb8/0x114 [ 3012.362959] ? trace_hardirqs_off+0x64/0x200 [ 3012.367346] kasan_end_report+0x43/0x49 [ 3012.371302] kasan_report_error.cold+0xa7/0x1b9 [ 3012.375953] ? __lock_acquire+0x2cb4/0x3ff0 [ 3012.380267] __asan_report_load8_noabort+0x88/0x90 [ 3012.385175] ? __lock_acquire+0x2cb4/0x3ff0 [ 3012.389474] __lock_acquire+0x2cb4/0x3ff0 [ 3012.393603] ? ret_from_fork+0x24/0x30 [ 3012.397467] ? mark_held_locks+0xf0/0xf0 [ 3012.401507] ? mark_held_locks+0xf0/0xf0 [ 3012.405545] ? ret_from_fork+0x24/0x30 [ 3012.409410] ? ret_from_fork+0x24/0x30 [ 3012.413283] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 3012.418626] ? save_trace+0xd6/0x290 [ 3012.422321] lock_acquire+0x170/0x3c0 [ 3012.426104] ? lock_sock_nested+0x3b/0x110 [ 3012.430325] _raw_spin_lock_bh+0x2f/0x40 [ 3012.434372] ? lock_sock_nested+0x3b/0x110 [ 3012.438600] lock_sock_nested+0x3b/0x110 [ 3012.442642] l2cap_sock_teardown_cb+0xa0/0x6d0 [ 3012.447204] ? rcu_nmi_exit+0xb3/0x180 [ 3012.451068] l2cap_chan_close+0x377/0x950 [ 3012.455197] ? __set_monitor_timer+0x200/0x200 [ 3012.459757] ? __lock_acquire+0x2853/0x3ff0 [ 3012.464072] ? check_preemption_disabled+0x41/0x280 [ 3012.469069] l2cap_chan_timeout+0x17e/0x2f0 [ 3012.473390] process_one_work+0x864/0x1570 [ 3012.477616] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3012.482272] worker_thread+0x64c/0x1130 [ 3012.486225] ? __kthread_parkme+0x133/0x1e0 [ 3012.490532] ? process_one_work+0x1570/0x1570 [ 3012.495004] kthread+0x33f/0x460 [ 3012.498345] ? kthread_park+0x180/0x180 [ 3012.502305] ret_from_fork+0x24/0x30 [ 3012.506170] Kernel Offset: disabled [ 3012.509778] Rebooting in 86400 seconds..