10000, 0x20000}, {0xa98f, 0x3, 0x1, 0x0, 0x7fff, 0x4}, {0x2, 0xfff, 0xf8e, 0x0, 0x1a1, 0x812}, {0x40, 0x8, 0x6, 0x5, 0x12, 0x3f}, {0x7, 0x3ff, 0x7fff, 0xaa62, 0x7, 0x4c28}, {0x2, 0x3f, 0x80000000, 0x7, 0xe0, 0x9}, {0x1, 0x2, 0xff, 0x86, 0x8fb, 0xffff0000}, {0x5, 0x5, 0x1ff, 0x3f, 0x7fffffff, 0x101}, {0x7fffffff, 0xfff, 0xcd30, 0x3f, 0x3f, 0x1f}, {0x8, 0x4, 0x2, 0x10000, 0x7, 0x8}, {0xd3f, 0x5, 0x3f, 0x1, 0x8, 0x3}, {0x7aa8, 0x2, 0x7fffffff, 0x7, 0x2, 0x85}, {0x3, 0x6, 0x100, 0x3f, 0x7ee, 0x7f}, {0x7fff, 0x0, 0x8, 0x1, 0x0, 0x1000}, {0x1, 0x1ff, 0xfffffff9, 0x3, 0x626, 0x7}, {0x4, 0x6, 0xffffffff, 0x3, 0x3, 0x6}, {0xdc, 0x7, 0x401, 0x9, 0x26, 0x7ff}, {0xa4, 0xfff, 0x80000001, 0x9, 0x769c4a52, 0x616a}, {0x0, 0x7a, 0x7, 0xfffffbff, 0x1000, 0x7fff}, {0x9, 0x8001, 0x800, 0x7f, 0x6, 0x40}, {0x6, 0x2, 0xff, 0xffffffff, 0x0, 0x2}, {0x80000000, 0xfffffff9, 0x0, 0x80000001, 0x4, 0x1}, {0x2cd6, 0x8, 0xfff, 0x4, 0x6, 0x800}, {0x9, 0x0, 0x9, 0x544, 0x80, 0xfffffffa}, {0xff, 0x1, 0x8, 0x81, 0x350f, 0x80000001}, {0x6, 0x1a5b, 0x8, 0x8, 0xaf6, 0x20}, {0x7f, 0x3, 0x8, 0x3, 0x9, 0x3ff}, {0x6, 0x2, 0x96, 0x5280f564, 0x2d9d, 0x800}, {0x5, 0x8a4, 0x7, 0x5, 0x3, 0x3}, {0xdc, 0x4, 0x7, 0x7, 0x3ff, 0x6}, {0x1, 0x8, 0xc0, 0x7, 0x80000000, 0x1}, {0xffff0001, 0x8a, 0x7f, 0x0, 0x4, 0x1}, {0x4, 0x9, 0x400, 0x3f, 0x0, 0x6}, {0xdb, 0x2ff, 0x7, 0x3, 0x0, 0xfa1}, {0x800, 0xa59, 0x1, 0x6, 0x1, 0x6}, {0x9, 0x8, 0x7, 0x8001, 0x44, 0x5}, {0x4, 0x4, 0x7fff, 0x200, 0x7, 0x6}, {0x8000, 0x6c000000, 0x80000000, 0x3, 0xfffffffb, 0x1}, {0x5e4e, 0x0, 0xac97, 0x3f, 0xff52, 0xff}], [{0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x7}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x72bfa635964e1a8d, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x8000, 0x3, 0x10000000, 0x2c, 0x8}, 0x0, 0x6, [{0xffff, 0x21, 0x7, 0x10000, 0x0, 0x1}, {0x8, 0x7fffffff, 0x876, 0x9, 0x1, 0x8f}, {0x5, 0x80, 0xbbd, 0x80, 0x4}, {0x5, 0x80000000, 0x3, 0x14af4408, 0x0, 0x227}, {0x1, 0x2, 0x5, 0xffffffff, 0x742, 0x2}, {0xe7f, 0x3, 0x800, 0x7fff, 0x7, 0xfffffff8}, {0x67, 0x32d, 0x1, 0x28c, 0x3ff, 0x7}, {0x7, 0xffffffff, 0x1000, 0x7, 0xffffffff, 0x2}, {0x8, 0xfff, 0x4, 0x3, 0x3, 0x1}, {0x5, 0x3, 0x9, 0x1c6c000, 0xa, 0x5}]}, [{0x3, 0xb6, 0x6, 0x1219, 0x6, 0x81}, {0x100, 0x8, 0x7, 0x9, 0x10001, 0x3}, {0x9, 0x5, 0x8, 0x7, 0x7, 0x7}, {0x3, 0x9, 0x0, 0x2, 0x8000, 0x1}, {0x3, 0x4, 0x2, 0x8e5, 0x1, 0x81}, {0x101, 0x401, 0xfff, 0xea, 0x0, 0x6}, {0x1, 0x47, 0x1, 0x0, 0x80000001}, {0x800, 0x34, 0x3, 0x7fff, 0x0, 0x1a}, {0x80000001, 0x6bd, 0x7fffffff, 0x5, 0x101, 0x2}, {0x6, 0x5, 0x4, 0x4, 0x4, 0x3}, {0x4e60a5d7, 0x9, 0x9, 0x9, 0x2, 0x3}, {0x80000000, 0x9, 0x7c50, 0x5, 0x6, 0x7}, {0x40, 0xff, 0xfffffffe, 0x4, 0x7d8, 0x5}, {0x790, 0x8, 0x8, 0x2, 0x3c, 0x4}, {0xfffeffff, 0x8000, 0xb38, 0x50712971, 0x82e, 0x499f}, {0xcbd, 0xa0bb, 0x3ff, 0x2, 0xc1, 0x400}, {0x2, 0x9, 0x100, 0x7, 0x1, 0x3f}, {0x2, 0x8d6, 0x9, 0x0, 0x20, 0x1}, {0x7, 0x1, 0xfffff800, 0xfffffff8, 0x80, 0x4}, {0x100, 0xfffff000, 0x4, 0x6, 0x1, 0x1}, {0xfffffffd, 0x1, 0xbb, 0x2a4, 0x2, 0x2}, {0xfb7, 0x4a, 0x6, 0x8, 0x6, 0x1}, {0x27f2, 0x61f, 0x9a, 0x1000, 0x8}, {0x101, 0x6, 0x2, 0x10001, 0x9}, {0xfffffff7, 0x0, 0x229, 0x2, 0x1, 0x4}, {0x2427000, 0xce, 0x7, 0x7, 0x1, 0x5}, {0x6, 0x3, 0x80000001, 0x8000, 0x5, 0x81}, {0x6a8, 0x36, 0x7, 0x6, 0x1, 0x4b1}, {0x9, 0xea1, 0x5, 0x5, 0x5, 0xe50}, {0x401, 0x9, 0x54e9, 0x401, 0x1020, 0x200}, {0x9, 0xffff, 0x1, 0x100, 0x2, 0x6}, {0x2, 0x3, 0x400, 0x73d80000, 0x6b, 0x2}, {0x6, 0xffff, 0x4, 0xc43c, 0x10001, 0x2}, {0x6, 0x2, 0x2, 0x20, 0xff, 0x702c}, {0x0, 0x5, 0x1e7892c5, 0x414, 0x3d068782, 0xb291}, {0x4, 0x0, 0xa99, 0x7fff, 0x3, 0x6}, {0xffffff7f, 0x80000000, 0xa8, 0x3b4, 0x1, 0x6}, {0x9, 0x1f, 0x0, 0xffff, 0x3, 0xfa1}, {0xfffeffff, 0x80000000, 0x7f, 0x3ff, 0x32, 0x3}, {0xd094, 0x0, 0xffffffff, 0x7, 0x0, 0x6}, {0x9b, 0x6, 0x5, 0x9, 0x101, 0x3}, {0x3, 0x9, 0x20, 0x3, 0x1ff, 0x5}, {0x1, 0x0, 0x0, 0x5, 0xff, 0x100}, {0x5, 0x2, 0x81, 0xfffffffb, 0x8001, 0x7}, {0x400, 0x0, 0x7, 0x7f, 0x58, 0x8}, {0x7ff, 0x1b4d, 0x8, 0x6, 0x200, 0x2}, {0x4, 0x80, 0x3, 0x3, 0x8, 0x2000000}, {0x3f, 0x8, 0x5, 0xfff, 0x5, 0x2}, {0x3ff, 0xb6a, 0x9, 0x3, 0x7ff, 0x3f}, {0x5e6b, 0x6, 0x0, 0x6, 0x3, 0x9f7c}, {0x1f7c, 0x100, 0x7fffffff, 0x1, 0x7f, 0xdb}, {0xaf37, 0x2, 0x4, 0x101, 0x4, 0x9}, {0x7fffffff, 0x4, 0x1, 0x800, 0x1656, 0x9}, {0x4, 0xa84, 0x4, 0x650b, 0x12e, 0x4}, {0x5, 0xffffffc1, 0x5, 0x9, 0x1ad, 0x7ff}, {0x10001, 0x7, 0x1, 0x70, 0x2, 0x1}, {0x1, 0x6, 0x2ebb, 0x7f, 0xa6ab, 0x95}, {0x1, 0xdc, 0x4, 0x745, 0x85c, 0x8}, {0x7b22, 0x80000000, 0x5, 0x4, 0x100, 0x200}, {0xb8a7, 0x1, 0xfff, 0x1, 0x6, 0x800}, {0xb4c, 0x2, 0xffff, 0x10000, 0xffffffff, 0xa88}, {0x1, 0x2, 0xfffff000, 0x9, 0x5, 0xe5}, {0x7, 0xd96b, 0x101, 0x1, 0x800, 0x80000000}, {0x3, 0x905, 0x7fff, 0x940c, 0x7fffffff, 0x3}, {0x101, 0x9, 0xff, 0x0, 0x3, 0x7}, {0xbfc6, 0x1, 0x20, 0x8000, 0x5, 0x7fff}, {0x0, 0x42, 0x106, 0x8, 0x10001, 0x562}, {0x80, 0x2, 0x8, 0x1, 0x1f}, {0x10001, 0x3, 0x400, 0x2ac, 0x40, 0x3ff}, {0x3ff, 0x989, 0x170, 0x0, 0x7, 0x3}, {0x1, 0x9, 0x4, 0x6, 0xeda5, 0x10000}, {0x7, 0xff, 0x40, 0x8, 0x9, 0x8}, {0x9, 0x7f, 0x0, 0xa7, 0x1f, 0x20}, {0xfffffffc, 0x2, 0x7, 0xb5f9, 0x1000, 0x81}, {0x6, 0x8, 0x0, 0xffffffff, 0x8972, 0x10000}, {0x1f, 0x19a, 0x7, 0x0, 0x0, 0x4d}, {0x7, 0x1f, 0x80000001, 0xe980, 0x7, 0x1}, {0x7, 0x7, 0x2, 0x4, 0x401, 0xfffffffd}, {0x2, 0x4, 0x6, 0x1, 0x8, 0x2}, {0x9, 0x4, 0x5, 0x0, 0xffffffff, 0x1}, {0x145a, 0xc93c, 0x800, 0x80, 0x8, 0x9}, {0x1, 0xaf3, 0x7, 0x0, 0x7, 0x7f}, {0xbc, 0x234e, 0x1, 0x6, 0x7fff, 0xffb1b8d}, {0xfff, 0x7, 0xffff, 0x7, 0x0, 0x8}, {0x6c9, 0x3, 0x20, 0x9, 0x7, 0x20}, {0xfffffffe, 0x92e, 0xe3, 0x44, 0x7d, 0x1ff}, {0x8001, 0x4, 0x1d17, 0x2}, {0x9, 0x4, 0x80, 0x7, 0x0, 0x6}, {0x2, 0x5, 0x9, 0x1f, 0x9, 0x2}, {0x2, 0x4, 0x9, 0x81, 0x3, 0xff}, {0x32, 0x7, 0xd, 0x3, 0x7f, 0x80}, {0x6, 0xff, 0x5, 0x800, 0x3, 0x80000001}, {0x5c, 0x5, 0xb3bd, 0x5, 0x4, 0x4}, {0x654, 0x8, 0xfffffffe, 0x8, 0x7fff, 0x8}, {0x1, 0xaf, 0x7eb, 0x0, 0x2, 0x1}, {0xce, 0xfffffbff, 0x5, 0x8, 0x9, 0x10000}, {0x4, 0x3, 0xaa9, 0x4, 0x0, 0x8}, {0x1, 0x5, 0x0, 0x2, 0xffff, 0xb098}, {0x0, 0x1, 0x4, 0x2, 0x7f, 0x6}, {0x5, 0x20, 0x3f, 0x9c45, 0x2, 0x5}, {0x7fff, 0x7ff, 0x3ff, 0x3, 0x1ff, 0x40}, {0x3, 0x9, 0x8b, 0x10000, 0x9e8f, 0x5}, {0x80000001, 0x80000000, 0xca7, 0x800, 0x26df, 0x5}, {0x3, 0x200, 0x3, 0x1, 0x401, 0x8e15}, {0xae, 0x2, 0x7, 0x3, 0xfffffff9, 0x400}, {0x5, 0xfffffe01, 0x4, 0x5}, {0x5d0d, 0x65, 0x10000, 0xbca6, 0x2, 0x7f}, {0xff, 0x6, 0x4, 0x6, 0x7f, 0x101}, {0xb7c4, 0x1, 0x5, 0x8, 0xfffffff8, 0x1}, {0x62a, 0x7, 0x9cd, 0x4f2c8971, 0x3, 0xfffffff9}, {0x100, 0xa52, 0x1, 0x4, 0x4, 0x7ff}, {0x1, 0x3, 0x2, 0x2, 0x4, 0xb9c2}, {0x7f, 0x80000000, 0x7ff, 0x3, 0x100, 0x8}, {0x3, 0x7247, 0x7b99, 0x1, 0x9, 0x2}, {0x9, 0x7fffffff, 0x9, 0x2, 0x8, 0x3}, {0x20, 0x1, 0x100, 0xfff, 0x9, 0xffffffff}, {0x55c55196, 0x40, 0x5, 0x9, 0x1, 0xda}, {0x100, 0x3, 0x1, 0xfffffff9, 0x6, 0x8}, {0x8, 0x1ff, 0x9, 0x71, 0x0, 0x4}, {0x8, 0x7, 0xffff, 0x10001, 0xffffffff, 0x1}, {0x2a3fbbb, 0x3ff, 0x84f, 0x5fb0b32c, 0x0, 0x6}, {0x23bb, 0x8, 0xd5, 0xf500, 0x3, 0x5}, {0x20, 0xf4, 0x3, 0x0, 0x8, 0xfffffbff}, {0xe0, 0x10001, 0x3, 0xf2, 0x800, 0x1f}, {0x101, 0x6d5, 0x9, 0x1000, 0x101, 0x7fffffff}, {0x7f, 0x4, 0x9, 0x1, 0xd7e, 0x200}, {0x7fffffff, 0x1000, 0x7, 0x5ad5d59, 0x1, 0x7}, {0xfff, 0x1, 0x0, 0x40, 0x7ff, 0x80}], [{0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4ef71e6707942cd, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x4}, {0x5}, {}, {0x6, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb864794fb2daf56f}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x3, 0x1}, {0xd089e8e4b3a5ed7b}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}]}}]}, {0x9f, 0x6, "28afa17ea7c66545ff4a266de059db7b9eac0cf945fe51554e5d32c33e0ac627c3b347ca755866d382b5491bf6a78c02f1c60c477a35cea2d2518b7335d0042b35cefa8ff82d6d8838dae4dc2a4fe018e9bc1e7b4237cd67a9bf30cb10e9736c3845a8b8d1e470d22c2904fec6622eac07beb18605fa1c15f543d3378d46c029edc8c52a073e5bdd1f481f19b6fdb3d03e4b4ced2a526b77edafc5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_tunnel_key={0x88, 0x1d, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffe0, 0x3d46, 0x7, 0x9, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x24, 0x6, "e2c1bd298fd90e333fb5662bf13570084c191541307f5d5bff33d7e23d4a14a1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x1b0, 0x10, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7f, 0x0, 0x3, 0x1000, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1a, 0x12, 0x4, 0x6, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x2, 0x1, 0xff, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x909, 0x7f, 0x3, 0xc02, 0x100}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcea}]}, {0xf9, 0x6, "eb16c75ffcf5bf483da31fc64487200c846e279ca0a50e51804a75462ac7510e503153df0bd317a9658cd9a35c2a4b7edb7a0e02aa00adb8de2d1be84c760ccb3956bbe5cdabb21a38e84af809f70f5892a2923eee262aa74435b32244f3615a500d354897650203700f65c8649facae9b5a97fa0d9b96415127dd3e08cc9c08f62c2ff262bec02634e5c2c2e86455e2c4be8bc0b17b504e89ce926aeb067a4b9170cb84789808840d474b665053db4349a22690833793f90281df480268dee26fd7c827572e5a2531dc0a362238e1b2becb4efad89f5c49c760a1eb8aa1dda5e121ae31dd171938783c20e4f0db27fb4a5c8c469d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x108, 0xe, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xa9, 0x6, "1e7586ff4b077abf7ff4d4cc4dcc1c58cb0bb63287e967c6e248a41a1860184d81cc378623e1b8ac0d691f7aa34c17111d7bddfad412477cc7732406843384ef0ad095ac38da776567e405e1cef9ceae48f36bfbf7ad4f95cc590fdc22d9f5b2ce877af0082a4f15c927bf544564a20a3693ac2b6b809127b91a99c298f5caf90f7516688bb986ee04b6e3522d70ec64cc411d7cc4c45aa3527b6b0e3e6ebdb70970986e88"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x108, 0xa, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xaa, 0x6, "e541e2c139ab40d027961c4ff4f4371d411e7ce994148a6f3c1f0f93d73f0b588f6282eeb26c99ab8d94ac94889573130c8b183c372309d8f1b57aa62978b08d567e7173d1be6260a0d75747a1787231334b358fb8fc07e219a651eb7b548a4fe2d4bb7f3a84670fa8d4127adc4b5838855e618dc158b67308d29a3259d906db2822c7b62f03ea1da7381741b27182e5b6e06775a4786256af26b5a6725f8982e56303f7bc5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x100, 0x13, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0xc4, 0x6, "ac0ef716653c824eb2b6b47071120e8a6dd3b40a8b147b5d2058e87dc39983781efb74eb58013682d8fb47aa1b87c855581b60ddecdc7f9ecaf75fb056f56a7f67ff4aebfc07b7bca4163097bf3a51b369f58bd132bb31a6087f165d5692a8f232b0272001dc841860ad245d847264bb50312a79d5989b9cb590750b999ebd040545ee7ddb310e6fc89184b094076c2182a29b46cd3a6388d92778cdc37a8de8e74d9ae649439e46109ea392b19d1fae1f4f3e73e01995527a0bd79ce5803d09"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xac, 0x1c, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x101}]}, {0x79, 0x6, "757f6dc0b8ed9f9cc570a200e36e4556a22293dd3877fd3b93e81ccf797b03191bd92f39096741de277a5032bd2f2eee86d5c5621beea2315c62cf0fc25b4dd93adc8435cc45eb2fe1e217d805c86f53733970ac884bf798aad74d0bdefc01ce9f9b66524bc9c634502d11b41667f4547fbdb734c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x88, 0x1d, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0xcee, 0x5, 0x7ff, 0x100}, 0x1000}}]}, {0x39, 0x6, "ec931156855d8bc21437621c5155b2da5918cce15d8d05a9e26047d38986aac57982f8076fae0bef80874c25e39c058d8102601de9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}, {0x2964, 0x1, [@m_tunnel_key={0xfc, 0x16, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0xad, 0x6, "3c8513eb9940f09c2ad93ffd19d6d8ab90a0f5abdffb3e89fa93fefead79d15a7c5a326cbbdffd9015cb652bc021ef03d346cb4932a5433f0ed552172e1f6f43538407235eab2e8414750172c178a0bc6ce057490036356f5bb7ef3635ddbb7d0b06f1ae1dba39a988caf4ff32d928f9d28f4f9aeaf679cd7f9ed4a5b4c9aa28ecf226ff8ee328293c7717a2a726beed7ecf9a1d9fa0ee73a27301406a4eb3dc766918d86e49a3263d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xc4, 0x3, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3f, 0x7, 0xe37, 0x4}, 0x25a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x0, 0x10000, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x20000000, 0x7, 0x1ff}, 0xfff7}}]}, {0x40, 0x6, "49397f2f0c2b54d59921888f2a7f7279efe60108456e1aa8c0062c957e3845d362d7adfaa9da3b08ea1bec5e13a6f78deedac164d0fc2d538a38717f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xf0, 0x10, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_PARMS={0x18, 0x1, {0x81, 0x8, 0x4, 0x3, 0x6d9}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x9f, 0x6, "1f6170c53efe766866e019d582312c02e2cc8415844df1a4cb8b71fcd21a736736b1d0b7dfe6eb35e50453fbc7aeb475031736e2857d666aeea5802bb3655fe5a5b8613ea536e4049f0dad2267f234af074f56c57c46535608b7bcf5ca440183ceb3790577ee947bd9a0eb74db2dc10b930f4e11398e98cfe9acad82d3344e92a153b5cde00609e1d3134fb25bad961dae73af8eb9bd3eb7b1f486"}, {0xc}, {0xc}}}, @m_tunnel_key={0x104, 0x1c, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x9e, 0x6, "a753c6c6d43f5ab2197b43d9b3c46e6dcb855ba194b6f5e6a68d333e7a59d19269877e40d6826f2c553eea12cbb140fa59b401e86890aa682bdc9f8707cddaf8f3f4172b0d9e3c14ed50ce4c278a4e5e914cb3f8c58035b5b7a10e050990efb41dd8a0b7a60d4e8614dc071c64aa0cbc76ccb2e3baaae69e8943325c581c3dbab9e9c1a965bbd871d68c123fd4d609d05eca111065eab1f19bb1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x10c, 0x17, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7, 0x8, 0x671d, 0x8000}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x5, 0x1, 0x8, 0x22e}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x393b789b}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x7}}]}, {0x95, 0x6, "6566e9f4ea58fc691d09ef358fee31967c58e7c4ecce3f0737acda85b177c5c957ee58d20781001514eb5c8d754706c67b29b770d4ae438ba1e81830a117147f56447f2c0f168d9edeb61c75b4662db2894d91acef88fbe23630ab4eb129fb3f0477cb83746b89a1a19050f1bd762987d9ee884b0ce895ac978dcc549f971cddb0f10580250839be9e4dd100847aff91cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x128, 0x12, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x800, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x1, 0x5, 0x200}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x10001, 0x6, 0x7, 0x7}}}]}, {0x9c, 0x6, "243b5a09e42058defed72f4a52f9af1611959694ce75602649cbf251407e3b8e8b06a389e34ac6db13798dc88247d251c4766883b4ae3fcd65df0e4576af643ce7dd599c8e7217c2810b40a622e641e1ba9dfea8f164ab9b581561811bf67a573ff1994b831ad725ba193735fd53b0a287c9bdd3f4d6b601b108bfd251d5d1df7d25b7d65c77334c0422674ff754696137fd626dc3951eea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x258, 0x1f, 0x0, 0x0, {{0x7}, {0x174, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x116, 0x6, {0x6, 'nat\x00', 0xa4, 0xffac, "34677e1ec0b0b8e3a4006a92ffb2d76495b537fd89cd9965ff7b5946abc190254b8c8b3e5620719fa45846777e979f0bcd42ace5d5c0a066d4119521e43e778a48649920c0fc67666ef0d12b9c87a7812150be43130b69872646c7ec7b81b3c625d6e415763a741f3416f3535f748527a8bf273247ac3f5e1dec66ba636dea4488ec9c3e4400e85ae9863f36200b11671f6e2a20028cef82b05044a25af5d54f7eeb147406fb647c59bc847a49055bbe8371b8212cb803048fa6c821dbfe0db0ade983e9d00cef0733909f00936e1067c77966175ebfd40711a5dcc600deb25489b6be67c5147ed1f40b4446"}}]}, {0xbf, 0x6, "2222f932b3c1d0151c3348e38953dd12343c84e4e57ef72eb241d310b9e2ac84f87c45d61f5d2ec599611151923c5165db11fad609c5889ede08706ac07a208906240734931eb38e3f68ece51a743437c44f00388a106b9f05059656891f93e472b9ac7d77048766f911e8cdcaec4310839146f8132de951d0c6478ed99f64ad98bd0dc6e3ab7f76070eb4528c87ce6da9f6107c46fb450249d684acc6932c42602b42ca148785e82785b7acbf34d0ab3cf80746c2a1ea8f2575cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_mirred={0x124, 0xf, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x0, 0x6, 0x7f}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x6, 0x4, 0x9, 0xffff}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0x2, 0x2, 0x1}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa5dd, 0x80000000, 0x1, 0x6, 0x3a3c}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x7, 0x5, 0x9}, 0x2, r7}}]}, {0x55, 0x6, "01808fcc3c60b1043f963ab92cd9f1788c05250d85b156606e20e3f271aa081fe42e6529b7a7b3e530c792d16c2e2c4df9583baea56649ae9c20b8b80708eca5a042a4f32f91ce75cf3a06516e06dd2f2b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0x1ffc, 0x7, 0x0, 0x0, {{0xb}, {0x1f34, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x925, 0x81, 0x1, 0x6, 0x1, 0x6, 0xa1a, 0xfff, 0xfffffff7, 0x7fffffff, 0x58db0e51, 0x81, 0xd0f, 0x5, 0x100, 0x3, 0x0, 0x98, 0x1, 0x3f, 0x20, 0x2, 0x9, 0x1, 0x2, 0x4, 0x2, 0x3, 0x5, 0x1ff, 0x3, 0x75, 0x6, 0x4, 0xaefe, 0x7, 0x8, 0x20, 0x6a4, 0x9, 0x5d81, 0x53cdd0b4, 0x6, 0x1b3e, 0x5, 0xa6, 0x9, 0xa2, 0xffffff6d, 0xffffffff, 0x1a, 0x3, 0x7, 0x1, 0x101, 0x80000001, 0x6, 0x7, 0x9, 0x6, 0x1c7, 0x7bd1, 0x821, 0x1000, 0x40, 0x200, 0x8, 0x1c, 0xd, 0xfff, 0x9377, 0x5, 0x3, 0xff, 0x40, 0x9, 0x0, 0x2, 0x800, 0x3, 0x4, 0x80000000, 0x8, 0x6, 0x14fdfee4, 0x8, 0x3, 0x7, 0x7, 0x5, 0x8, 0x7, 0x4, 0x0, 0x9, 0x10001, 0x1, 0x7fff, 0x7, 0x1, 0x76, 0x5, 0x6, 0xa7c, 0x4, 0x7, 0x1f, 0x2, 0x7, 0x5, 0x4, 0x8, 0xff, 0x4, 0x5, 0x4, 0xff, 0x80000001, 0x7fffffff, 0x4, 0xd454, 0x51, 0x0, 0x6, 0x8, 0x7d, 0x7, 0x0, 0x8, 0x6, 0x80000001, 0x5, 0x8, 0x6, 0x81, 0x6, 0x1, 0x80, 0x5, 0x4, 0x1, 0x7fff, 0x9, 0x7, 0x100000, 0x0, 0x7, 0x0, 0x6e, 0xfffffffe, 0xfffffffb, 0x7, 0x1, 0x4, 0x2, 0x2, 0x6, 0x6, 0x1, 0x3ff, 0x200, 0xfffff801, 0x4, 0x1000, 0x1, 0x2, 0x8, 0x1000, 0x8b2, 0x6, 0x6, 0xed9c, 0xb05d, 0xfffff801, 0x1, 0x4, 0x1, 0x2, 0x3ff, 0x0, 0x7, 0x4, 0xac, 0x0, 0x8f9dcf7, 0x7, 0xfffffffc, 0x8, 0x100, 0x7ee6, 0x1f, 0x9d6f, 0x3, 0x7d, 0xffff, 0x22, 0x1ff, 0xffffffff, 0x6, 0x4, 0x3, 0x1, 0x7fffffff, 0x8, 0x4, 0x2, 0x10001, 0xfffffff8, 0x4, 0x39, 0xed93, 0x10000, 0x8001, 0x7, 0xffffffff, 0x9, 0x5, 0x1, 0x5, 0xfffffffc, 0x267b, 0x118, 0xffff7fff, 0x0, 0x7, 0x4, 0xffff, 0xffff, 0x18000000, 0xffffff81, 0x2a9b, 0x0, 0x5, 0x6, 0x3ff, 0x6, 0x5, 0x6, 0x0, 0x5, 0x8, 0x5, 0x2, 0x5, 0x3, 0x2, 0x1, 0x0, 0x44, 0x80, 0x5, 0x5, 0x40000, 0xfffffff8, 0x7, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xf3a, 0x0, 0x3, 0x7f, 0xffff, {0x5, 0x1, 0x5, 0x5, 0x5, 0xd97a}, {0x20, 0x2, 0x3, 0x5, 0xffff, 0x2e}, 0x8, 0x80000000, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x21, 0x2, 0x1, 0x2, 0x5, {0x3, 0x1, 0x3ff, 0x5, 0x4, 0x5}, {0x93, 0x1, 0xaae4, 0x80, 0x0, 0x10001}, 0x7, 0x80000000, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x95}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x3, 0x7, 0x4, 0x0, {0x80, 0x2, 0x4, 0x7, 0x6, 0xffffff81}, {0x3, 0x2, 0x6, 0xfe8f, 0xfc00, 0x8000}, 0x80000000, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff17}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x1ff, 0x1ff, 0x2, {0x1, 0x2, 0x2, 0x611d, 0x1, 0x9c}, {0x4, 0x1, 0x250f, 0x7, 0x0, 0x3c8}, 0x9000000, 0x3, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x2, 0x6, 0x2, 0x0, 0x81, 0x6, 0x6, 0x800, 0xe1, 0x6, 0x2, 0xffffff4d, 0xb51, 0x7ff, 0x1, 0x3, 0x4, 0x9, 0xffffffe0, 0x10001, 0x401, 0x1e432, 0x80000001, 0x8, 0x1ff, 0x800, 0x2cf, 0x4, 0x754, 0x5, 0xad6, 0x3, 0x6, 0x8, 0x800, 0x3, 0x3ff, 0x0, 0x7fffffff, 0x6, 0x8000, 0x800, 0x9, 0x4, 0xfffffffc, 0x3, 0x8, 0x7fff, 0x9, 0x1, 0x8, 0x5, 0xc3e, 0x2, 0x100, 0x3ff, 0x0, 0x2, 0x2, 0x4, 0x3, 0x8001, 0x8000, 0x5, 0xc82, 0x1ff, 0xfffffff9, 0x1, 0x28, 0x2, 0x7, 0x8, 0x7fffffff, 0x7, 0x80000001, 0xbe5, 0x1, 0x4191, 0xfffffffa, 0x7fffffff, 0x400, 0x6, 0x7, 0x5, 0xffff, 0x80000000, 0xffffffff, 0x3ff, 0x93, 0xff, 0x5, 0x1, 0xe37c, 0x100, 0x6fc17063, 0x100, 0x3, 0x1, 0x0, 0x8, 0x2, 0xb771, 0x5, 0x5, 0x9, 0xc09c, 0x7, 0x0, 0x9c000000, 0x0, 0x80000001, 0x8, 0xb54, 0x6a0, 0x5, 0x8aa, 0x4e56, 0xb8a, 0x1936, 0xfffff1fa, 0x1, 0x101, 0x5, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x7, 0x6, 0x4, 0x9, 0x8, 0x80000000, 0x8, 0x7, 0x8001, 0x5, 0x8001, 0x100, 0x1, 0x2, 0x5000000, 0x9, 0x1000, 0x3f, 0x1, 0x9, 0x10001, 0x9, 0x6000, 0x5, 0x1, 0x8, 0xfffffffc, 0xffffffff, 0xeda0, 0x4, 0x4, 0x3, 0x101, 0x401, 0x7f, 0x9, 0x0, 0x5, 0x101, 0xcdd, 0x4, 0x3, 0x3, 0x2, 0x9, 0xfffffff8, 0x5, 0x8, 0xffffffff, 0x3, 0x2, 0x4, 0xa4, 0x0, 0x4, 0x10001, 0x0, 0x9c50, 0x1, 0x8, 0x3, 0x522, 0x753, 0x5, 0x80000000, 0x9, 0x5, 0x6, 0x8, 0x1, 0x3, 0x5, 0x2, 0x400, 0x0, 0x4, 0x0, 0xd6cf, 0x1, 0xcbc3, 0xfffffffe, 0xec6a, 0xb3f, 0x10001, 0x0, 0xabf, 0x400, 0x3, 0xc2, 0x3, 0x1f, 0x5, 0x80, 0x496, 0xa92, 0x2acd, 0x0, 0x5, 0x9, 0x81, 0x6, 0x7f7, 0x8, 0x44, 0xfffffff7, 0x0, 0x8, 0x8000, 0x5, 0x400, 0x0, 0x7fff, 0x0, 0x4, 0x7fff, 0x5, 0x2, 0xfffffff9, 0xf06, 0x200, 0x40, 0xe770, 0x8, 0x400, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x80, 0xffffffff, 0x97, 0xa83a, 0x9, 0x4, 0xfffffff7, 0x100, 0x3, 0x200, 0x2, 0x400, 0x81, 0x80000001, 0x7fffffff, 0x0, 0x200, 0x3f, 0x8, 0xff, 0xff, 0x0, 0x1000, 0x4, 0x9, 0x9, 0x2, 0x8, 0x7, 0x9, 0x2, 0x400, 0x9, 0x7fffffff, 0xffffffff, 0x200, 0x8, 0x2, 0x7, 0xfd, 0x77de, 0x81, 0x2, 0x2, 0x2, 0x6, 0x6, 0x6, 0x7, 0x3, 0x2, 0x81, 0x0, 0x7ff, 0x5, 0x2, 0x8, 0x1, 0xf1, 0x1, 0x7000000, 0x80000001, 0x20, 0xef5, 0xfffffff7, 0xa9, 0x1f, 0x2, 0x3, 0x10001, 0x1, 0x66, 0x596, 0x1, 0xffff, 0xffff, 0x0, 0x54f, 0x7, 0x5, 0x4, 0x2, 0x0, 0x10000, 0x6, 0x1f, 0x3ff, 0x4, 0x7, 0x7, 0x10000, 0xfffffffb, 0x45, 0x1, 0x8, 0xffffffff, 0x8, 0x8, 0x80, 0x10000, 0x0, 0xf, 0x88, 0xfff, 0xec, 0x5, 0x0, 0x5, 0x0, 0xcd7, 0x5, 0x0, 0x5, 0x9, 0x8, 0x2, 0x3f, 0x81, 0x3ff, 0x10001, 0x200, 0x33814a42, 0x9, 0x0, 0x0, 0x8, 0x80000, 0x3, 0x9, 0x4, 0xff, 0x8, 0x6, 0x80000000, 0x7, 0x3, 0x3, 0xb7, 0x8, 0x4, 0xfffffff8, 0xb36, 0xfffffff9, 0x6, 0x6, 0x9, 0x2, 0xf90, 0x54b, 0xb5e, 0x2, 0x0, 0x2d, 0xffffffff, 0x4, 0x10000, 0x2, 0x41258b9b, 0xc7b, 0x20f3eabe, 0x4c, 0x1, 0x0, 0xfffffffb, 0x72, 0x2, 0xffffff41, 0x3, 0x7f, 0x491, 0x3f, 0x401, 0x80000001, 0x2, 0xa7, 0xfffffffe, 0xb00, 0x4, 0x4, 0x2, 0x7a, 0x0, 0x7, 0x6, 0x8, 0x8c7f, 0x7ff, 0x3, 0x1f, 0x800, 0x7817, 0xfa3, 0x200, 0x0, 0x3, 0x2, 0x81, 0x800, 0xffffffff, 0x6, 0x9, 0x7, 0x6, 0x400, 0x3, 0x3, 0x2, 0x4, 0x6, 0x6, 0x81, 0x9, 0x2da132a1, 0x8, 0x8001, 0xfff, 0x6, 0x2, 0x5, 0xffffffff, 0x2, 0x2, 0x9, 0x200, 0x1, 0xffffffe1, 0x7, 0x0, 0x7, 0x3, 0x9, 0x77ad7da0, 0x8, 0x3, 0x1, 0xbd, 0x7, 0x80000001, 0x4, 0x1, 0x1, 0x8, 0x5d3d, 0x7, 0x6, 0x40, 0x8be6c7c, 0x0, 0x80000001, 0xef, 0xff, 0xa54, 0x3, 0x3, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x10001, 0x8000, 0x20, {0x3f, 0x1, 0xe9, 0x6, 0xfe, 0x1000}, {0x40, 0x3, 0x0, 0x4, 0x7, 0x4}, 0xfffffffe, 0x5, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc6af29f3, 0x8, 0x1ff, 0x9, 0xba6, 0x88a, 0x81, 0x4ea3, 0x7, 0x60, 0x7ff, 0xfffffff7, 0x1, 0x1000, 0x800000, 0x9, 0x2, 0x100, 0xfffffff8, 0x9, 0x9, 0x81, 0x9, 0x8, 0x7, 0x1000, 0x7, 0x2, 0xff, 0x800, 0x6, 0x3, 0x800, 0xa504, 0x6, 0x5, 0x40, 0x1, 0x8, 0x3, 0x4, 0x3, 0xfffff879, 0x1ff, 0x10000, 0x800, 0x6, 0x9, 0x7fff, 0x7fff, 0x6, 0x4, 0xdd, 0x387, 0x4, 0xffff, 0x81, 0x9, 0xd8, 0xfffffff9, 0x9, 0x6, 0x7, 0x7, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x9, 0x3, 0x9, 0x1000, 0x0, 0x9, 0xfff, 0x3, 0xa2, 0x7ff, 0x1ff, 0x4, 0x100, 0x9, 0xfffffff7, 0x80000000, 0x2, 0x9, 0x0, 0x3, 0xffffffe1, 0x1f, 0xff, 0x5, 0x800, 0x80, 0x2, 0x5, 0x1000, 0xb97, 0x0, 0x133, 0x6, 0x8, 0x8001, 0x5, 0x2, 0x101, 0x631d, 0x3, 0x401, 0x9, 0xfffffff7, 0x3, 0x2, 0x8, 0x8, 0xc5e2, 0x101, 0x94eb, 0x8, 0x2, 0x4, 0x80, 0x5, 0x4, 0x800, 0x2, 0xeb, 0x6, 0x80000001, 0x9af5, 0x5, 0x7, 0x1, 0x2, 0xffffdc6e, 0x7, 0x7fffffff, 0x2, 0xffff, 0x4, 0x7, 0x1ff1, 0x37, 0x242, 0x3, 0x7, 0xfffffffc, 0x2, 0x100, 0x1ff, 0x1, 0x8, 0x4, 0xffff, 0x3, 0x3, 0x41da, 0x8001, 0x2, 0x4, 0x9, 0x8, 0x3, 0x1ff, 0x401, 0x9, 0xff, 0x6b02, 0x4, 0x80000001, 0x2e9d, 0x4, 0x4, 0x9, 0xfff, 0x1, 0x3, 0x101, 0x9, 0x0, 0x20, 0x8000, 0x7, 0x81, 0x8909, 0x7ff, 0xfffffffb, 0x7, 0x0, 0x9, 0xf4, 0xfff, 0x1ff, 0x5, 0x98d, 0x13dc, 0x1, 0x5, 0x5, 0xfffffffd, 0x7f, 0x6, 0x2, 0x9, 0x4, 0x3, 0xffffffc1, 0x4, 0x7, 0x2e, 0x3, 0x0, 0x9, 0x2, 0x7, 0x4, 0x2, 0x7f, 0x3ff, 0x7, 0x2566, 0xbdbe, 0x2, 0x2, 0x2, 0x59a2, 0x9, 0x3, 0xfff, 0x3, 0x9a, 0x4, 0x1, 0x1f, 0x10001, 0x6, 0x1, 0x61a8, 0x7, 0x45a, 0x1, 0xfc000000, 0x7fffffff, 0x8001, 0x1f8000, 0x7, 0x7, 0x8f2, 0x101, 0x6, 0x80000001, 0x4, 0x200, 0x7f, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x6, 0xc512, 0x3, 0x400, 0xf958, 0x4, 0x6, 0x1000, 0x5, 0x9a, 0x7, 0x5, 0x17f, 0x200, 0x4, 0xffffffff, 0x0, 0xfffffffe, 0x80, 0x8001, 0xffffffff, 0x2, 0x7fd, 0x6, 0x4, 0xffffff51, 0xe1ee, 0x5, 0x1, 0xffff, 0x6000000, 0xff, 0x200, 0xe0b, 0x502d74cc, 0x5, 0x1000, 0x7, 0x40, 0x80, 0x8, 0x5, 0x7, 0x2, 0xdaa, 0xad, 0x8, 0x401, 0x0, 0xffffffff, 0x81, 0x0, 0x2, 0x54, 0x9, 0x588, 0x0, 0x4, 0x361, 0x8, 0x7fffffff, 0x8e, 0x5, 0x8, 0x75, 0x1, 0x1, 0x81, 0x4, 0x0, 0x6, 0xffffffff, 0x400, 0x1, 0x4, 0xfffffff9, 0x0, 0x8001, 0x73b1, 0x1ff, 0x81, 0x2000000, 0x6, 0x6, 0x3ff, 0xff, 0x5823, 0xfffffc01, 0x6, 0x6, 0x8000, 0x4, 0x9000, 0x2, 0x9, 0x2b65, 0x0, 0x4, 0x7ff, 0x2, 0x10000, 0x6, 0xffffffff, 0xebb, 0x120e, 0x5, 0x101, 0x8, 0x7, 0x1, 0xff, 0x7fff, 0x2, 0x40, 0x7, 0x0, 0xf4a2, 0x0, 0x3c18, 0x9, 0x9, 0x1e, 0x81, 0x3, 0x2, 0x8000, 0x9, 0x3, 0x1ff, 0x80000001, 0x5, 0x7fffffff, 0x9, 0x0, 0x1, 0x80000001, 0x5, 0x90a, 0x800, 0xb1, 0xffff, 0x0, 0x5, 0xffffffff, 0x1000, 0x3, 0x1, 0x2, 0x8, 0x40000, 0x3, 0x81, 0x8, 0x1, 0x80, 0xffffffff, 0x5, 0x1, 0x80000001, 0x1, 0x258b47aa, 0x3, 0x37, 0x2, 0x2, 0x7, 0x3, 0xce73, 0x10000, 0xd5, 0x3, 0x557a, 0x2, 0x0, 0x0, 0x3, 0xfffffffd, 0x7, 0x6, 0x80000001, 0x3f, 0x3f, 0x8, 0x3, 0x2, 0x401, 0xfff, 0x6, 0x0, 0x6, 0x0, 0x7fff, 0x40, 0xffff, 0x0, 0x4b9a06b9, 0x1, 0x2, 0xffff, 0x4, 0x401, 0xb8000000, 0x20, 0xe82, 0xfffff309, 0x1, 0x9, 0x4, 0x9f, 0x6, 0x9, 0x7, 0x7b27, 0x10000, 0x1, 0x8, 0x8, 0x3, 0x4f, 0x6e8f, 0x8, 0x1f, 0x7fff, 0x8, 0x400, 0x4, 0x1, 0x7ff, 0x7fff, 0x40, 0x4, 0xfffffffe, 0x9, 0xff, 0x2916, 0x1000, 0xd18, 0x9, 0x2, 0x100, 0x5, 0x2, 0x40, 0xba5, 0x9, 0x100, 0x4, 0x8, 0x9, 0x7, 0x7c3, 0x20, 0x8, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xd197}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5449, 0x1, 0x7fff, 0x3, 0x4, {0x5, 0x1, 0x9, 0x9, 0x1f}, {0xfc, 0x0, 0x0, 0x7fff, 0x2, 0x2}, 0x9, 0x101, 0x5}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffff001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8001, 0x3, 0x2, 0xc2, 0x4, 0x741600, 0x3, 0x1000, 0x8, 0x0, 0x6, 0xfffffff9, 0x8, 0x401, 0x8, 0x0, 0x4, 0x8001, 0x3, 0x9, 0x24000000, 0x6, 0x4, 0x10000, 0x101, 0x8, 0xfffffffb, 0x4, 0xde, 0x0, 0x0, 0x9, 0x3, 0x4, 0x10001, 0x7fffffff, 0x101, 0x6, 0x7f, 0x7, 0x9, 0x1, 0x80000001, 0x80000000, 0x1, 0x7acb, 0x200, 0x3, 0x1000, 0x8, 0x1, 0xfffffffd, 0x81, 0x80, 0xa9, 0x80000000, 0x9, 0x92f, 0x20, 0x8001, 0x6c, 0x0, 0x1f, 0x96, 0x6, 0x7fffffff, 0xfffffffa, 0x5, 0x8, 0x7, 0x2, 0x7, 0x3, 0x6, 0xfff, 0x2, 0x6, 0x7ff, 0x9, 0x800, 0x9, 0x850, 0xffff8001, 0x0, 0x3, 0x7ea, 0x9f, 0x5, 0x20, 0xff, 0x9, 0x10001, 0x7fffffff, 0x5, 0x4, 0xa9f, 0xffff, 0x10000, 0x8, 0xa79, 0xb3, 0x7fffffff, 0x1f, 0xffffffff, 0x1, 0x7, 0x7f3b, 0x7, 0x3, 0x6, 0x200, 0x6, 0x9, 0x0, 0x5, 0x200, 0x7ff, 0x1, 0x4, 0xff800000, 0xfff, 0x3, 0x9, 0x923, 0x2, 0x8, 0xe4, 0x2, 0x0, 0x3, 0x5, 0x3, 0x3, 0xf6d, 0x6, 0x279c, 0x1000, 0xfffffff9, 0x1ff, 0x3, 0x1, 0x4, 0x4, 0xdd, 0x7, 0x80000000, 0x14f, 0x2, 0x7fffffff, 0x7, 0x0, 0x155, 0xffff, 0xfffffff9, 0x2, 0x7ff, 0x1, 0x2c0, 0x4, 0x6, 0x800, 0x1, 0x1, 0x101, 0x6, 0x2, 0x4e9, 0x81, 0x7fff, 0x3, 0x7, 0x9, 0x0, 0x8001, 0x1f000, 0x7, 0x20, 0x2, 0x39, 0x6f2, 0x9, 0x46b, 0x7f, 0xf0b4, 0x8, 0x3ff, 0x6, 0xcec2, 0x1, 0x9f4b, 0x6, 0x1ac, 0x6f, 0x84e1, 0x2, 0x401, 0x7, 0xfffffffa, 0x6, 0x5, 0x0, 0x6f, 0x149, 0x8, 0xfffffc01, 0x9, 0x0, 0x9, 0x3ff, 0xfff, 0x0, 0x8, 0x4, 0x3, 0xf6, 0x437, 0x5, 0x6, 0x4000000, 0x1000, 0x9, 0x7fffffff, 0x7, 0x81, 0x5, 0x1, 0x401, 0x3, 0xdfe, 0x7, 0x20d2415, 0x7f, 0x7774, 0x7, 0x7, 0x1, 0x9a, 0xfffffffa, 0x3f, 0x20, 0x0, 0x8, 0x64, 0x3, 0xa0000, 0x5, 0x1, 0x20, 0x4b, 0x80000000, 0xc16, 0x4593, 0x80, 0x5, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xfffffffffffffffe, 0x2, 0xfff, 0x400, {0xb8, 0x0, 0x5, 0x5, 0x800, 0x4ad5daaa}, {0x81, 0x0, 0x8, 0x3, 0x3f, 0x8}, 0x0, 0x0, 0x401}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x4, 0x80000000, 0x6, 0x0, {0x90, 0x1, 0x0, 0x1f, 0x400, 0x7}, {0x43, 0x3, 0x2, 0xff, 0xffff, 0x3f}, 0x200, 0x80, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x91, 0x6, 0x3ff, 0x0, 0x1, 0x10000, 0xc1e4, 0x8001, 0x10001, 0x0, 0x1, 0x2, 0x0, 0x1, 0x3, 0x3, 0x1, 0x2, 0x8000, 0x6, 0x802, 0x7, 0x2, 0xff, 0xffffffff, 0xace2, 0x100, 0x3, 0x9, 0x9, 0x80, 0x2, 0x448c, 0x24000000, 0x1, 0x20, 0x6, 0x1, 0xffff, 0x7, 0xc0, 0x400, 0x5, 0x2000, 0x0, 0x0, 0x3, 0x6, 0x3f, 0x86, 0x7, 0xfffffff7, 0x4, 0x0, 0x9, 0x3, 0x2, 0x5, 0x6, 0x3, 0x3, 0xac, 0x1, 0x7fff, 0x7, 0x8, 0x6, 0x1, 0x4, 0x0, 0x1, 0x80000001, 0x6, 0x1ff, 0x1, 0x400, 0x20, 0x2, 0x6, 0x23, 0x9, 0x4, 0x6, 0x7, 0x100, 0x1, 0x5, 0x80000000, 0x1, 0x1, 0x80, 0x8000, 0x5, 0x4, 0x4, 0x0, 0x0, 0x9, 0x8, 0x8, 0xffffffc1, 0x4, 0x1, 0x8, 0x4, 0x6, 0x5, 0x0, 0x9, 0x1, 0x1000, 0x101, 0x200, 0x0, 0x35, 0x5, 0xfffffffd, 0x734d, 0x8, 0x1, 0xffffffe1, 0x9, 0xfffffff8, 0x3, 0x9b, 0xec34, 0x3, 0xf3, 0x5, 0xff, 0x6085, 0x6, 0x3, 0x2, 0x9, 0xffffffc0, 0x101, 0x52, 0x5d8, 0x3, 0x1ff, 0x6, 0x1, 0x1, 0x8, 0x2, 0x65, 0x3, 0x5, 0xec02, 0x1, 0x3, 0x6, 0xbb0, 0x9, 0x7, 0xfff, 0x9, 0x5, 0x8, 0x24d, 0x2, 0x70fe, 0xfffffffa, 0x5, 0x200, 0x45858c9b, 0x3ff, 0x40, 0x8, 0x81, 0x6, 0xfffffff8, 0x7, 0x9, 0x8000, 0x1f, 0x6, 0x10001, 0x4, 0x80000000, 0x8, 0x32, 0x8, 0x3, 0x80000000, 0x80000000, 0x7, 0x0, 0x33, 0x9, 0xff, 0x0, 0x6, 0x5, 0xfa6, 0x2, 0x80, 0x7ff, 0x7, 0x0, 0x8, 0x0, 0xbbd, 0xffff, 0x9, 0x420f, 0x8, 0x80000001, 0x5, 0x1, 0xffffffff, 0x8000, 0x6, 0x4, 0xfffffe01, 0x6, 0x1, 0x8000, 0x4, 0x6a, 0x401, 0x80000001, 0xe35, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0x3f, 0x9, 0x2ee, 0x2, 0x5, 0x8, 0x8, 0x0, 0x200, 0x4, 0x3, 0x2000, 0x1ff, 0x0, 0x6, 0x401, 0x1, 0x23e49cfe, 0x8000, 0x6, 0x4, 0x4, 0x48, 0x7, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6de}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3b, 0x10000000, 0x1, 0x2, 0x1, {0x80, 0x0, 0x1, 0xfffe, 0x4, 0x10001}, {0xfa, 0xac517f9a1c87c0d9, 0x0, 0x200, 0x6, 0x5}, 0x7fff, 0x2, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0xa0, 0x6, "53871ee70d459a40849e6682386659abe711ce1366e7c49a6b31cac7e49ff8f6e00fa087bbaf99fa5b5d3495cc711725499b3402382d0cdf7578b25529c7d772322c806113fa9e0eadfeaa9440c9a95f488563f2fb8ec5ec0da5c999ab486244e722545786eee4300b2929888a674854b71ab3b2b10c8c0b723542ad6c7bcba7cdb44c2f5b531326629a848abc470d1af0d89e543bf1b1314c730035"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1474, 0x1, [@m_mpls={0xe8, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xb4, 0x6, "de483637ddb5314ef695c78f71e5c75c11821a89ed647b7a5560136b553b983a75bb93cd9f1b4863bca850eb3594d98f51c0944dc8405cd1116e0f0009ad5ce4a96442621c0492159e81e83961e22809c24c40804dcc29543ae2662b0cfc81094206d130e6b507287e998426224ac64f1603054979a0261865be76a619cc6c96835f58c19b0c303aeeaada4bdbb8bf46ee6399fe23f7faeab7674de4d5f5644925315a024aeddd9ccb7a72da238e536f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xe8, 0x18, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xfffc, 0xf4, 0x0, 0x6}, {0x3, 0xd9, 0x80, 0x1}, {0x3ff, 0x82, 0x6, 0x80000001}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x12, 0xbd, 0x1}, {0x1ff, 0x3, 0xc, 0x587}, {0x9, 0x5, 0x0, 0x3}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0x9, 0x7, 0x200}, {0x1, 0x40, 0x8, 0x10001}, {0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0xce684a6}, {0x11d9, 0x6, 0x2}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc1, 0xf, 0x1f, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x24, 0x6, "f1576dec1820bb4728b43dc5bdfd1f7ba60599329cec4732ab340bff25137f13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x174, 0x1, 0x0, 0x0, {{0x8}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x35, 0x6, {0x2, 'mangle\x00', 0x0, 0x1ff, "ca44b135cc8ec0740b14cc"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1f}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x73, 0x6, {0x2, 'nat\x00', 0x6, 0xe0fb, "9b73fe3f244582d9a3451b5c0617ebfa8e854fdf8da5cbb405d09b00dcefedafdc600c2b93455b3b343b3f1c03dce0a04275379c945b453a1cd7c02072a08cb47891fcc9a8c0764c93"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}]}, {0x26, 0x6, "e13aa78f9f5b6fc857219c2425eff0e61d30ca05e6ef1d6b71de8252703d4f9a07cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x1060, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100000, 0xff, 0x2, 0x1ff, 0x8}, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x1, 0x20000000, 0x5, 0xffffff01}, @remote, @dev={0xac, 0x14, 0x14, 0xd}, 0xff}}]}, {0x7c, 0x6, "e277e2a6debf4d17954cac99df1be82f27a9e747b5a996a9c3a7ec9a8984c32672b2f2ecaf6441d096ddb91728ae638dba0213ad922630d33c44734b8a1dc495674f85e0acf7cce67c7e9b40ddaa8e92cf34b3c899751f82dc0a16fcc80912415b1d5517f9e599b106ca80ef7dac2b58070b03dea66d1cdb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x30c, 0x1, [@m_connmark={0x21c, 0x8, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffffffe0, 0x5, 0x80, 0x2}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x6, 0x5, 0x1, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x10000000, 0x6, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0xffff, 0x5233}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x2, 0x3, 0x81}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xf20, 0x4, 0x1, 0x1}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x1, 0xfffffff7, 0xae3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfc0000, 0xd, 0x101, 0xfffffffa}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x7, 0x32, 0x8000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3337, 0x3, 0x800, 0x1}, 0x1}}]}, {0xd4, 0x6, "b5f89153acb4728e0191bcfe29ac7190024a0e352a6f94bfcf0d475e1ca6d56a84f4a5464d437d8e353518ff9d21e2c951ca42c53ddefdacf8f369727876ebb9bd2e91c03636908c6e7f99bf4f132bba7664d0af2aaf8a195b2a9b2bb489ea570f6c17417845945c99e1006eed2766bfe4e8795d92187ae99cc7a1f3daa28be1ef0fa07612221514e8180a5f941cac66e14fec43921effb54d72cb784c1107bbf98c0d443b043efcd8c72e5b48f4d015a231a2ebbea3a7678035cb9dee3d921f1c5d02ee309a4cde8031477eecf1073f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0xec, 0x11, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x869, 0x7f, 0x6, 0x300000}, {0x7, 0x1, 0xff, 0x8}, {0x9, 0x9, 0xe, 0xe012}, {0x20, 0x6b, 0x80, 0x6}, {0x3, 0x80, 0x8, 0x27}, {0x6, 0xfc, 0x2}, {0x8000, 0x7f, 0x1, 0x4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x80, 0x6, "5713df1a96fab26e0044af84e4d35b3ded59b9f87db5f0d59dcd0e0c5e420fcb58d81fdd237b4895c11d81786cead12ab5b60edb961fd82eddb2b6972ca282ef7c0563424a96ae42bb5cb7a5b1e0475166d49f12a6e0ad2c20a1051d95582f738a8147437102b9fdce05c0fa322bfe71155356ce0db865227966467f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x4}]}, 0x7818}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8, 0x8}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) socket$pptp(0x18, 0x1, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 07:02:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x7807, 0x80, 0x100, 0xfffffff8, {{0x26, 0x4, 0x1, 0x16, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x23, 0x5a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty]}, @lsrr={0x83, 0x23, 0xb8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @end, @rr={0x7, 0x17, 0x99, [@loopback, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @remote, @rand_addr=0x64010101]}, @timestamp={0x44, 0x4, 0x80, 0x0, 0x9}, @timestamp={0x44, 0x10, 0x22, 0x0, 0x2, [0x7, 0x200, 0x3]}, @rr={0x7, 0xf, 0xcf, [@rand_addr=0x64010101, @broadcast, @multicast1]}, @end]}}}}}) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x6000, 0x0, 0xfffffffa, 0x7, 0x0, [{0x8, 0x9, 0x1, '\x00', 0x40}, {0xff, 0x40}, {0x1f, 0x1, 0x8, '\x00', 0xcf}, {0x0, 0x1, 0x5, '\x00', 0x9e}, {0x80, 0xeb, 0x0, '\x00', 0x3}, {0x0, 0xff, 0x7, '\x00', 0x2}, {0x4, 0x80, 0x1}, {0x1f, 0x5, 0x1, '\x00', 0xf0}, {0x4, 0x3, 0x1, '\x00', 0x1}, {0x65, 0x1, 0xf0, '\x00', 0x8}, {0x1, 0x9, 0x75, '\x00', 0x1}, {0xfc, 0x9, 0x0, '\x00', 0x1}, {0x1, 0x0, 0xf7, '\x00', 0x1}, {0x5, 0x3, 0x40, '\x00', 0x7}, {0x3f, 0x7, 0x5, '\x00', 0x6}, {0x5, 0x9, 0x80, '\x00', 0x4}, {0x2b, 0x3, 0x40, '\x00', 0x4}, {0x1, 0x1, 0x6, '\x00', 0x1}, {0x7, 0xff, 0x3, '\x00', 0x2}, {0xfb, 0x8, 0x7, '\x00', 0x7}, {0x3f, 0x7, 0x7}, {0x81, 0x1, 0x80, '\x00', 0x8}, {0x9, 0x2, 0xf, '\x00', 0x20}, {0x4, 0x2, 0x6, '\x00', 0x40}]}}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8242c0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20040) 07:02:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r2 = socket(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x7807, 0x80, 0x100, 0xfffffff8, {{0x26, 0x4, 0x1, 0x16, 0x98, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x23, 0x5a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @empty]}, @lsrr={0x83, 0x23, 0xb8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @end, @rr={0x7, 0x17, 0x99, [@loopback, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @remote, @rand_addr=0x64010101]}, @timestamp={0x44, 0x4, 0x80, 0x0, 0x9}, @timestamp={0x44, 0x10, 0x22, 0x0, 0x2, [0x7, 0x200, 0x3]}, @rr={0x7, 0xf, 0xcf, [@rand_addr=0x64010101, @broadcast, @multicast1]}, @end]}}}}}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x6000, 0x0, 0xfffffffa, 0x7, 0x0, [{0x8, 0x9, 0x1, '\x00', 0x40}, {0xff, 0x40}, {0x1f, 0x1, 0x8, '\x00', 0xcf}, {0x0, 0x1, 0x5, '\x00', 0x9e}, {0x80, 0xeb, 0x0, '\x00', 0x3}, {0x0, 0xff, 0x7, '\x00', 0x2}, {0x4, 0x80, 0x1}, {0x1f, 0x5, 0x1, '\x00', 0xf0}, {0x4, 0x3, 0x1, '\x00', 0x1}, {0x65, 0x1, 0xf0, '\x00', 0x8}, {0x1, 0x9, 0x75, '\x00', 0x1}, {0xfc, 0x9, 0x0, '\x00', 0x1}, {0x1, 0x0, 0xf7, '\x00', 0x1}, {0x5, 0x3, 0x40, '\x00', 0x7}, {0x3f, 0x7, 0x5, '\x00', 0x6}, {0x5, 0x9, 0x80, '\x00', 0x4}, {0x2b, 0x3, 0x40, '\x00', 0x4}, {0x1, 0x1, 0x6, '\x00', 0x1}, {0x7, 0xff, 0x3, '\x00', 0x2}, {0xfb, 0x8, 0x7, '\x00', 0x7}, {0x3f, 0x7, 0x7}, {0x81, 0x1, 0x80, '\x00', 0x8}, {0x9, 0x2, 0xf, '\x00', 0x20}, {0x4, 0x2, 0x6, '\x00', 0x40}]}}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:20 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8242c0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20040) 07:02:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x6000, 0x0, 0xfffffffa, 0x7, 0x0, [{0x8, 0x9, 0x1, '\x00', 0x40}, {0xff, 0x40}, {0x1f, 0x1, 0x8, '\x00', 0xcf}, {0x0, 0x1, 0x5, '\x00', 0x9e}, {0x80, 0xeb, 0x0, '\x00', 0x3}, {0x0, 0xff, 0x7, '\x00', 0x2}, {0x4, 0x80, 0x1}, {0x1f, 0x5, 0x1, '\x00', 0xf0}, {0x4, 0x3, 0x1, '\x00', 0x1}, {0x65, 0x1, 0xf0, '\x00', 0x8}, {0x1, 0x9, 0x75, '\x00', 0x1}, {0xfc, 0x9, 0x0, '\x00', 0x1}, {0x1, 0x0, 0xf7, '\x00', 0x1}, {0x5, 0x3, 0x40, '\x00', 0x7}, {0x3f, 0x7, 0x5, '\x00', 0x6}, {0x5, 0x9, 0x80, '\x00', 0x4}, {0x2b, 0x3, 0x40, '\x00', 0x4}, {0x1, 0x1, 0x6, '\x00', 0x1}, {0x7, 0xff, 0x3, '\x00', 0x2}, {0xfb, 0x8, 0x7, '\x00', 0x7}, {0x3f, 0x7, 0x7}, {0x81, 0x1, 0x80, '\x00', 0x8}, {0x9, 0x2, 0xf, '\x00', 0x20}, {0x4, 0x2, 0x6, '\x00', 0x40}]}}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x7, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2380ae49, 0x2, 0x4, 0x0, 0xf30c, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0x7f, 0x5, 0x6, "f43d6d60"}, 0x67ac, 0x4, {}, 0x67b, 0x0, r0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x40, 0x80, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x7f, 0x40, 0x81, "612ec6f5"}, 0xea8, 0x4, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x4, 0x6, 0x4, 0x8, 0x40, {0x0, 0xea60}, {0x3, 0xc, 0x7, 0x81, 0x1, 0x7, "e1f114ed"}, 0x21, 0x4, {}, 0x6, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000200)={0x8001, 0x0, 0x4, 0x20, 0x8, {r2, r3/1000+10000}, {0x2, 0xc, 0x4, 0x3, 0x71, 0x0, "c2cccf45"}, 0x9, 0x4, {}, 0x9a83, 0x0, r0}) semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)=""/43) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000280)={0x1, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0x2, 0x20, 0x8, 0x16, 0x1f, "90235812"}, 0x101, 0x4, {}, 0x3, 0x0, r1}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) 07:02:21 executing program 3: r0 = socket(0x18, 0x1, 0x3) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x40, 0x5, 0x1}, 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0x3, 0x1ff, {0x56, 0x1, 0x6, {0x2, 0x7}, {0x0, 0xfff}, @cond=[{0x4, 0x1, 0x5, 0x3, 0x9, 0x8}, {0x2, 0x80, 0xff81, 0xfe, 0x1, 0x3}]}, {0x51, 0x6, 0x1f, {0x4, 0xfff8}, {0x8000, 0x3f}, @ramp={0x5, 0xb3, {0x6, 0x5, 0xfffd, 0x3f}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x8, 0x81, 0x7ff, 0x4, 0x8}) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10100, 0x0) close$fd_v4l2_buffer(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0xfffffffffffffffc) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8242c0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20040) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7ff) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2380ae49, 0x2, 0x4, 0x0, 0xf30c, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0x7f, 0x5, 0x6, "f43d6d60"}, 0x67ac, 0x4, {}, 0x67b, 0x0, r0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x40, 0x80, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x7f, 0x40, 0x81, "612ec6f5"}, 0xea8, 0x4, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x4, 0x6, 0x4, 0x8, 0x40, {0x0, 0xea60}, {0x3, 0xc, 0x7, 0x81, 0x1, 0x7, "e1f114ed"}, 0x21, 0x4, {}, 0x6, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000200)={0x8001, 0x0, 0x4, 0x20, 0x8, {r2, r3/1000+10000}, {0x2, 0xc, 0x4, 0x3, 0x71, 0x0, "c2cccf45"}, 0x9, 0x4, {}, 0x9a83, 0x0, r0}) semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)=""/43) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000280)={0x1, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0x2, 0x20, 0x8, 0x16, 0x1f, "90235812"}, 0x101, 0x4, {}, 0x3, 0x0, r1}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2380ae49, 0x2, 0x4, 0x0, 0xf30c, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0x7f, 0x5, 0x6, "f43d6d60"}, 0x67ac, 0x4, {}, 0x67b, 0x0, r0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x40, 0x80, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x7f, 0x40, 0x81, "612ec6f5"}, 0xea8, 0x4, {}, 0x1}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x4, 0x6, 0x4, 0x8, 0x40, {0x0, 0xea60}, {0x3, 0xc, 0x7, 0x81, 0x1, 0x7, "e1f114ed"}, 0x21, 0x4, {}, 0x6, 0x0, r1}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000200)={0x8001, 0x0, 0x4, 0x20, 0x8, {r2, r3/1000+10000}, {0x2, 0xc, 0x4, 0x3, 0x71, 0x0, "c2cccf45"}, 0x9, 0x4, {}, 0x9a83, 0x0, r0}) (async) semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)=""/43) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000280)={0x1, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0x2, 0x20, 0x8, 0x16, 0x1f, "90235812"}, 0x101, 0x4, {}, 0x3, 0x0, r1}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) (async) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10100, 0x0) close$fd_v4l2_buffer(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0xfffffffffffffffc) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7ff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7ff) (async) 07:02:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x5a1e41) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x8001) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2380ae49, 0x2, 0x4, 0x0, 0xf30c, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0x7f, 0x5, 0x6, "f43d6d60"}, 0x67ac, 0x4, {}, 0x67b, 0x0, r0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x40, 0x80, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x7f, 0x40, 0x81, "612ec6f5"}, 0xea8, 0x4, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x4, 0x6, 0x4, 0x8, 0x40, {0x0, 0xea60}, {0x3, 0xc, 0x7, 0x81, 0x1, 0x7, "e1f114ed"}, 0x21, 0x4, {}, 0x6, 0x0, r1}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000200)={0x8001, 0x0, 0x4, 0x20, 0x8, {r2, r3/1000+10000}, {0x2, 0xc, 0x4, 0x3, 0x71, 0x0, "c2cccf45"}, 0x9, 0x4, {}, 0x9a83, 0x0, r0}) (async, rerun: 64) semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)=""/43) (async, rerun: 64) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000280)={0x1, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x1, 0x2, 0x20, 0x8, 0x16, 0x1f, "90235812"}, 0x101, 0x4, {}, 0x3, 0x0, r1}) (async) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10100, 0x0) close$fd_v4l2_buffer(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0xfffffffffffffffc) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10100, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0xfffffffffffffffc) (async) 07:02:21 executing program 3: r0 = socket(0x18, 0x1, 0x3) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x40, 0x5, 0x1}, 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0x3, 0x1ff, {0x56, 0x1, 0x6, {0x2, 0x7}, {0x0, 0xfff}, @cond=[{0x4, 0x1, 0x5, 0x3, 0x9, 0x8}, {0x2, 0x80, 0xff81, 0xfe, 0x1, 0x3}]}, {0x51, 0x6, 0x1f, {0x4, 0xfff8}, {0x8000, 0x3f}, @ramp={0x5, 0xb3, {0x6, 0x5, 0xfffd, 0x3f}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x8, 0x81, 0x7ff, 0x4, 0x8}) socket(0x18, 0x1, 0x3) (async) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x40, 0x5, 0x1}, 0x10) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0x3, 0x1ff, {0x56, 0x1, 0x6, {0x2, 0x7}, {0x0, 0xfff}, @cond=[{0x4, 0x1, 0x5, 0x3, 0x9, 0x8}, {0x2, 0x80, 0xff81, 0xfe, 0x1, 0x3}]}, {0x51, 0x6, 0x1f, {0x4, 0xfff8}, {0x8000, 0x3f}, @ramp={0x5, 0xb3, {0x6, 0x5, 0xfffd, 0x3f}}}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x8, 0x81, 0x7ff, 0x4, 0x8}) (async) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7ff) 07:02:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x5a1e41) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x8001) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x5a1e41) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x8001) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) (async) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/128) 07:02:21 executing program 3: r0 = socket(0x18, 0x1, 0x3) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x40, 0x5, 0x1}, 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0x3, 0x1ff, {0x56, 0x1, 0x6, {0x2, 0x7}, {0x0, 0xfff}, @cond=[{0x4, 0x1, 0x5, 0x3, 0x9, 0x8}, {0x2, 0x80, 0xff81, 0xfe, 0x1, 0x3}]}, {0x51, 0x6, 0x1f, {0x4, 0xfff8}, {0x8000, 0x3f}, @ramp={0x5, 0xb3, {0x6, 0x5, 0xfffd, 0x3f}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x8, 0x81, 0x7ff, 0x4, 0x8}) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/128) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xc, 0x0, 0xfffffffd}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x5a1e41) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x8001) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c100700000000", @ANYRES32=0x0, @ANYBLOB="0e000b00e0fff1ff04000e000600050000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x80000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x20, 0x1, {{0xa, 0x4, 0x2, 0x12, 0x28, 0x66, 0x0, 0xff, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x1, [{@loopback, 0xffffffe0}, {@broadcast, 0x584}]}]}}}}}) close$fd_v4l2_buffer(0xffffffffffffffff) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0xfffffffb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x408180, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000300)='syz1\x00') socket$inet_udp(0x2, 0x2, 0x0) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/128) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/128) (async) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xc, 0x0, 0xfffffffd}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c100700000000", @ANYRES32=0x0, @ANYBLOB="0e000b00e0fff1ff04000e000600050000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x80000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x20, 0x1, {{0xa, 0x4, 0x2, 0x12, 0x28, 0x66, 0x0, 0xff, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x1, [{@loopback, 0xffffffe0}, {@broadcast, 0x584}]}]}}}}}) close$fd_v4l2_buffer(0xffffffffffffffff) (async) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0xfffffffb) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x408180, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000300)='syz1\x00') socket$inet_udp(0x2, 0x2, 0x0) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x68402) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xc, 0x0, 0xfffffffd}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c100700000000", @ANYRES32=0x0, @ANYBLOB="0e000b00e0fff1ff04000e000600050000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x80000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x20, 0x1, {{0xa, 0x4, 0x2, 0x12, 0x28, 0x66, 0x0, 0xff, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x1, [{@loopback, 0xffffffe0}, {@broadcast, 0x584}]}]}}}}}) close$fd_v4l2_buffer(0xffffffffffffffff) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0xfffffffb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x408180, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000300)='syz1\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c100700000000", @ANYRES32=0x0, @ANYBLOB="0e000b00e0fff1ff04000e000600050000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4010) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x80000000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x20, 0x1, {{0xa, 0x4, 0x2, 0x12, 0x28, 0x66, 0x0, 0xff, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x1, [{@loopback, 0xffffffe0}, {@broadcast, 0x584}]}]}}}}}) (async) close$fd_v4l2_buffer(0xffffffffffffffff) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0xfffffffb) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x408180, 0x0) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000300)='syz1\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x1, {0x500, 0x3, 0x60, 0x8000, 0x3ff, 0x7}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'veth0_to_batadv\x00'}}, 0x1e) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x5, 0x3, 0x1, 0x9, 'syz1\x00', 0x3}, 0x5, 0x30, 0x1, 0xffffffffffffffff, 0x1, 0x9, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13}) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x68402) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x3, &(0x7f00000003c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x2, 0x200000) read$usbfs(r5, &(0x7f0000000200)=""/227, 0xe3) r6 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x8e, 0x40100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000004c0)={0x7c, 0x2, 0x53b6, 0x243e, &(0x7f0000000440)=[{}, {}]}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0xc55c, 0x2, 0x4, 0x0, 0x1, {r2, r3/1000+10000}, {0x2, 0x8, 0xed, 0x1, 0x9, 0xa9, "f35762fe"}, 0x9, 0x4, {}, 0x800, 0x0, r4}) close$fd_v4l2_buffer(r0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x302, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f0000000340)={0x46852de9, 0x6, 0x4, 0x2, 0x3, {0x0, 0x2710}, {0x1, 0x1, 0x3f, 0xc4, 0x1f, 0x0, "d1d2a741"}, 0x3f, 0x4, {}, 0x0, 0x0, r8}) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x6, 0x1ff, 0x1ff, 0x100}, 'syz0\x00', 0x2f}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2a2, 0x2, 0xfb, 0x9, &(0x7f00000000c0)="eeecbb65fbc2e04ce15b1b5d0fac20621472b9d7e74fa0624a88cbc84c053b907865f56c792e7f0f5de6eebf55e12d8072eca27277ccd74383c07aaaa3d806fc473980f7e639eb26880cd41eb44aff4a4889d68c3fa10a3925fea33239a928a6bb5b0c6fd01658ebd6b860d3acf966bcd2bd5c75a87027d0017f9e2ee4e5220dd0e05ba156fd87e18f88af8ad4073e4120007ae9c8e27bfd685681a1471adce927d34a07e8d28f8f7890c206107599ba3f0ca15e1d5b1011b5451183b4049e37c8e4e106837040e3366a6588f94fbf02e6098940449001b08a65bfedc81369dd7aa4ea6ac857d7fc67fe2222f2efccac84edd286c8eed3a26e16eb"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000002c0)=0x3f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25060000000e0001006e657464657673ff6d0000000f0002006e657464657673696d0600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20008054) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000200)=0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x58ad9999, 0x101400) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x4, 0x11, 0x4000, 0x60b, 0x1f, 0xb38c, &(0x7f0000000380)="0138c61b5fb91eb8a237f1db5fbfb1f0c22f0ca11cf01f29859612821e0a5c"}) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x1, {0x500, 0x3, 0x60, 0x8000, 0x3ff, 0x7}}) (async, rerun: 64) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'veth0_to_batadv\x00'}}, 0x1e) (rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x5, 0x3, 0x1, 0x9, 'syz1\x00', 0x3}, 0x5, 0x30, 0x1, 0xffffffffffffffff, 0x1, 0x9, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13}) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) clock_gettime(0x3, &(0x7f00000003c0)) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x2, 0x200000) read$usbfs(r5, &(0x7f0000000200)=""/227, 0xe3) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x8e, 0x40100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000004c0)={0x7c, 0x2, 0x53b6, 0x243e, &(0x7f0000000440)=[{}, {}]}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0xc55c, 0x2, 0x4, 0x0, 0x1, {r2, r3/1000+10000}, {0x2, 0x8, 0xed, 0x1, 0x9, 0xa9, "f35762fe"}, 0x9, 0x4, {}, 0x800, 0x0, r4}) (async) close$fd_v4l2_buffer(r0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x302, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f0000000340)={0x46852de9, 0x6, 0x4, 0x2, 0x3, {0x0, 0x2710}, {0x1, 0x1, 0x3f, 0xc4, 0x1f, 0x0, "d1d2a741"}, 0x3f, 0x4, {}, 0x0, 0x0, r8}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x6, 0x1ff, 0x1ff, 0x100}, 'syz0\x00', 0x2f}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x68402) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x68402) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) (async) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2a2, 0x2, 0xfb, 0x9, &(0x7f00000000c0)="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"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000002c0)=0x3f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25060000000e0001006e657464657673ff6d0000000f0002006e657464657673696d0600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20008054) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000200)=0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x58ad9999, 0x101400) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x4, 0x11, 0x4000, 0x60b, 0x1f, 0xb38c, &(0x7f0000000380)="0138c61b5fb91eb8a237f1db5fbfb1f0c22f0ca11cf01f29859612821e0a5c"}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2a2, 0x2, 0xfb, 0x9, &(0x7f00000000c0)="eeecbb65fbc2e04ce15b1b5d0fac20621472b9d7e74fa0624a88cbc84c053b907865f56c792e7f0f5de6eebf55e12d8072eca27277ccd74383c07aaaa3d806fc473980f7e639eb26880cd41eb44aff4a4889d68c3fa10a3925fea33239a928a6bb5b0c6fd01658ebd6b860d3acf966bcd2bd5c75a87027d0017f9e2ee4e5220dd0e05ba156fd87e18f88af8ad4073e4120007ae9c8e27bfd685681a1471adce927d34a07e8d28f8f7890c206107599ba3f0ca15e1d5b1011b5451183b4049e37c8e4e106837040e3366a6588f94fbf02e6098940449001b08a65bfedc81369dd7aa4ea6ac857d7fc67fe2222f2efccac84edd286c8eed3a26e16eb"}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000002c0)=0x3f) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25060000000e0001006e657464657673ff6d0000000f0002006e657464657673696d0600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20008054) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000200)=0x4) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x58ad9999, 0x101400) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x4, 0x11, 0x4000, 0x60b, 0x1f, 0xb38c, &(0x7f0000000380)="0138c61b5fb91eb8a237f1db5fbfb1f0c22f0ca11cf01f29859612821e0a5c"}) (async) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x1, {0x500, 0x3, 0x60, 0x8000, 0x3ff, 0x7}}) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'veth0_to_batadv\x00'}}, 0x1e) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000200)={{0x5, 0x3, 0x1, 0x9, 'syz1\x00', 0x3}, 0x5, 0x30, 0x1, 0xffffffffffffffff, 0x1, 0x9, 'syz1\x00', &(0x7f0000000100)=['/dev/snd/controlC#\x00'], 0x13}) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x1) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) clock_gettime(0x3, &(0x7f00000003c0)) (async, rerun: 32) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x2, 0x200000) read$usbfs(r5, &(0x7f0000000200)=""/227, 0xe3) r6 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x8e, 0x40100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000004c0)={0x7c, 0x2, 0x53b6, 0x243e, &(0x7f0000000440)=[{}, {}]}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0xc55c, 0x2, 0x4, 0x0, 0x1, {r2, r3/1000+10000}, {0x2, 0x8, 0xed, 0x1, 0x9, 0xa9, "f35762fe"}, 0x9, 0x4, {}, 0x800, 0x0, r4}) close$fd_v4l2_buffer(r0) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x302, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f0000000340)={0x46852de9, 0x6, 0x4, 0x2, 0x3, {0x0, 0x2710}, {0x1, 0x1, 0x3f, 0xc4, 0x1f, 0x0, "d1d2a741"}, 0x3f, 0x4, {}, 0x0, 0x0, r8}) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (rerun: 32) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x6, 0x1ff, 0x1ff, 0x100}, 'syz0\x00', 0x2f}) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x300) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x2cd, 0x0, {}, {r1, r2/1000+10000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "0b6ab2facded526c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 07:02:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2a2, 0x2, 0xfb, 0x9, &(0x7f00000000c0)="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"}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000002c0)=0x3f) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25060000000e0001006e657464657673ff6d0000000f0002006e657464657673696d0600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20008054) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000200)=0x4) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x58ad9999, 0x101400) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x4, 0x11, 0x4000, 0x60b, 0x1f, 0xb38c, &(0x7f0000000380)="0138c61b5fb91eb8a237f1db5fbfb1f0c22f0ca11cf01f29859612821e0a5c"}) 07:02:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 07:02:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x300) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x2cd, 0x0, {}, {r1, r2/1000+10000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "0b6ab2facded526c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x300) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x2cd, 0x0, {}, {r1, r2/1000+10000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "0b6ab2facded526c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x1) (async) 07:02:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) close$fd_v4l2_buffer(r0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x300) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x2cd, 0x0, {}, {r1, r2/1000+10000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "0b6ab2facded526c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2, 0x5}) 07:02:22 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x4, {0x100, 0x81, 0x9, 0x2, 0x3, 0x1}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x7, 0x700, 0x8, 0x200, {{0x13, 0x4, 0x2, 0x3a, 0x4c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0xf, 0x6e, [@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x0, [{@loopback, 0x8}, {@private=0xa010102, 0x9}, {@loopback, 0x492}, {@broadcast, 0x80000001}]}, @ssrr={0x89, 0x3, 0x3e}]}}}}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x9, 0x8, {{0x45, 0x4, 0x2, 0x1f, 0x114, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x13, 0x47, [@multicast2, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0x1b, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2]}, @end, @cipso={0x86, 0x5b, 0x1, [{0x0, 0xe, "411fccb981e1a4506547832b"}, {0x7, 0x8, "7f7ddbaa64a6"}, {0x21e80afd87ab227b, 0xb, "01927a39438949471a"}, {0x1, 0x2}, {0x7, 0x12, "3f8f72d86622343a67f6c73c6080e52a"}, {0x2, 0x3, "f7"}, {0x1, 0xf, "1773b30a2b35c7fac9630be844"}, {0x0, 0xe, "0a87150a76e79b3b5be00aeb"}]}, @generic={0x83, 0x6, "2ab3b901"}, @ssrr={0x89, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x28, 0xde, 0x0, 0xa, [0x1, 0x10000, 0x3, 0x101, 0x401, 0x0, 0x5, 0xe535, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x7, [{@broadcast, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x9}, {@rand_addr=0x64010101, 0x401}]}, @rr={0x7, 0xf, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end]}}}}}) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x3692c1) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000004c0)) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28100000", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf250400000005000400010000000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10004000}, 0x4040085) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x7, 0x6, 0x7df8, 0x3, '\x00', 0x7}, 0x0, 0x20000502, 0x6, r4, 0x8, 0x9, 'syz1\x00', &(0x7f0000000180)=['SMC_PNETID\x00', '}\x00', '\\\x00', 'syz0\x00', '\x00', 'SMC_PNETID\x00', '@{/\x00', 'SMC_PNETID\x00'], 0x2f}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xf0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8d, 0xa8, @random="5f6379342918d914452afd79c33f6f2a68211ff68b19b02da39bfb065ba200205a6d1b2981ef2c83050a7db1f3261d814caa0bbc57f0648a17a517e82c934b0de40893670eac218e1db108cedd1a5f2d339961338bd582718639a8514c7a6a9aa02182258ed259e2f3d4c708203b0ea8f91782afb627c2999f1b1ab6c2a40fbc6db2928505b29b5152"}]}, 0xf0}}, 0x4000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 32) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2, 0x5}) 07:02:22 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x4, {0x100, 0x81, 0x9, 0x2, 0x3, 0x1}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x7, 0x700, 0x8, 0x200, {{0x13, 0x4, 0x2, 0x3a, 0x4c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0xf, 0x6e, [@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x0, [{@loopback, 0x8}, {@private=0xa010102, 0x9}, {@loopback, 0x492}, {@broadcast, 0x80000001}]}, @ssrr={0x89, 0x3, 0x3e}]}}}}}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x9, 0x8, {{0x45, 0x4, 0x2, 0x1f, 0x114, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x13, 0x47, [@multicast2, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0x1b, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2]}, @end, @cipso={0x86, 0x5b, 0x1, [{0x0, 0xe, "411fccb981e1a4506547832b"}, {0x7, 0x8, "7f7ddbaa64a6"}, {0x21e80afd87ab227b, 0xb, "01927a39438949471a"}, {0x1, 0x2}, {0x7, 0x12, "3f8f72d86622343a67f6c73c6080e52a"}, {0x2, 0x3, "f7"}, {0x1, 0xf, "1773b30a2b35c7fac9630be844"}, {0x0, 0xe, "0a87150a76e79b3b5be00aeb"}]}, @generic={0x83, 0x6, "2ab3b901"}, @ssrr={0x89, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x28, 0xde, 0x0, 0xa, [0x1, 0x10000, 0x3, 0x101, 0x401, 0x0, 0x5, 0xe535, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x7, [{@broadcast, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x9}, {@rand_addr=0x64010101, 0x401}]}, @rr={0x7, 0xf, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end]}}}}}) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)=0x1) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x3692c1) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000004c0)) (async, rerun: 64) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28100000", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf250400000005000400010000000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10004000}, 0x4040085) (async, rerun: 64) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x7, 0x6, 0x7df8, 0x3, '\x00', 0x7}, 0x0, 0x20000502, 0x6, r4, 0x8, 0x9, 'syz1\x00', &(0x7f0000000180)=['SMC_PNETID\x00', '}\x00', '\\\x00', 'syz0\x00', '\x00', 'SMC_PNETID\x00', '@{/\x00', 'SMC_PNETID\x00'], 0x2f}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xf0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8d, 0xa8, @random="5f6379342918d914452afd79c33f6f2a68211ff68b19b02da39bfb065ba200205a6d1b2981ef2c83050a7db1f3261d814caa0bbc57f0648a17a517e82c934b0de40893670eac218e1db108cedd1a5f2d339961338bd582718639a8514c7a6a9aa02182258ed259e2f3d4c708203b0ea8f91782afb627c2999f1b1ab6c2a40fbc6db2928505b29b5152"}]}, 0xf0}}, 0x4000) (async, rerun: 64) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (rerun: 64) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2, 0x5}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x2, 0x5}) (async) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)=0x1) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) 07:02:22 executing program 3: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x4, {0x100, 0x81, 0x9, 0x2, 0x3, 0x1}}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x7, 0x700, 0x8, 0x200, {{0x13, 0x4, 0x2, 0x3a, 0x4c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0xf, 0x6e, [@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0x24, 0x62, 0x1, 0x0, [{@loopback, 0x8}, {@private=0xa010102, 0x9}, {@loopback, 0x492}, {@broadcast, 0x80000001}]}, @ssrr={0x89, 0x3, 0x3e}]}}}}}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x9, 0x8, {{0x45, 0x4, 0x2, 0x1f, 0x114, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x13, 0x47, [@multicast2, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @ssrr={0x89, 0x1b, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2]}, @end, @cipso={0x86, 0x5b, 0x1, [{0x0, 0xe, "411fccb981e1a4506547832b"}, {0x7, 0x8, "7f7ddbaa64a6"}, {0x21e80afd87ab227b, 0xb, "01927a39438949471a"}, {0x1, 0x2}, {0x7, 0x12, "3f8f72d86622343a67f6c73c6080e52a"}, {0x2, 0x3, "f7"}, {0x1, 0xf, "1773b30a2b35c7fac9630be844"}, {0x0, 0xe, "0a87150a76e79b3b5be00aeb"}]}, @generic={0x83, 0x6, "2ab3b901"}, @ssrr={0x89, 0x1b, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x28, 0xde, 0x0, 0xa, [0x1, 0x10000, 0x3, 0x101, 0x401, 0x0, 0x5, 0xe535, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x7, [{@broadcast, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x9}, {@rand_addr=0x64010101, 0x401}]}, @rr={0x7, 0xf, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end]}}}}}) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090) (rerun: 32) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x3692c1) (async) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000004c0)) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28100000", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf250400000005000400010000000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10004000}, 0x4040085) (async) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x7, 0x6, 0x7df8, 0x3, '\x00', 0x7}, 0x0, 0x20000502, 0x6, r4, 0x8, 0x9, 'syz1\x00', &(0x7f0000000180)=['SMC_PNETID\x00', '}\x00', '\\\x00', 'syz0\x00', '\x00', 'SMC_PNETID\x00', '@{/\x00', 'SMC_PNETID\x00'], 0x2f}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xf0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8d, 0xa8, @random="5f6379342918d914452afd79c33f6f2a68211ff68b19b02da39bfb065ba200205a6d1b2981ef2c83050a7db1f3261d814caa0bbc57f0648a17a517e82c934b0de40893670eac218e1db108cedd1a5f2d339961338bd582718639a8514c7a6a9aa02182258ed259e2f3d4c708203b0ea8f91782afb627c2999f1b1ab6c2a40fbc6db2928505b29b5152"}]}, 0xf0}}, 0x4000) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0xff, 0x9, 0x20, 0x3f, 0xa8, 0x7f, 0x1f, 0x2, 0x1, 0x9, 0x20, 0xfd, 0x7f, 0x6, 0xc5, 0x40}}) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)=0x1) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 07:02:22 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0x200}, 0x6, 0x30, 0x9, 0xffffffffffffffff, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['/dev/video#\x00', '\x00'], 0xd}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:22 executing program 5: ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x2, 0x7}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0xff, 0x9, 0x20, 0x3f, 0xa8, 0x7f, 0x1f, 0x2, 0x1, 0x9, 0x20, 0xfd, 0x7f, 0x6, 0xc5, 0x40}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0xff, 0x9, 0x20, 0x3f, 0xa8, 0x7f, 0x1f, 0x2, 0x1, 0x9, 0x20, 0xfd, 0x7f, 0x6, 0xc5, 0x40}}) (async) 07:02:22 executing program 5: ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x2, 0x7}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) (async) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0xff, 0x9, 0x20, 0x3f, 0xa8, 0x7f, 0x1f, 0x2, 0x1, 0x9, 0x20, 0xfd, 0x7f, 0x6, 0xc5, 0x40}}) 07:02:22 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0x200}, 0x6, 0x30, 0x9, 0xffffffffffffffff, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['/dev/video#\x00', '\x00'], 0xd}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0x200}, 0x6, 0x30, 0x9, 0xffffffffffffffff, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['/dev/video#\x00', '\x00'], 0xd}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:22 executing program 5: ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x2, 0x7}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x2, 0x7}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000e6dbdf25060000000c001000000000ffffffff86cb6a0081ffffffac003f000000000007000000d0b6e971ae8bd2c4000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) close$fd_v4l2_buffer(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) (async) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0xa6d78e48ba431684) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/173) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000100)) close$fd_v4l2_buffer(r0) 07:02:22 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0x200}, 0x6, 0x30, 0x9, 0xffffffffffffffff, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['/dev/video#\x00', '\x00'], 0xd}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x5, 0x4, 0x6, 0x5, 'syz0\x00', 0x200}, 0x6, 0x30, 0x9, 0xffffffffffffffff, 0x2, 0x800, 'syz0\x00', &(0x7f0000000000)=['/dev/video#\x00', '\x00'], 0xd}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000e6dbdf25060000000c001000000000ffffffff86cb6a0081ffffffac003f000000000007000000d0b6e971ae8bd2c4000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) close$fd_v4l2_buffer(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (rerun: 32) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x240083) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0xa6d78e48ba431684) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/173) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000100)) close$fd_v4l2_buffer(r0) 07:02:22 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x2, 0x4, 0xffba3c6212fd49c5, 0x8, {}, {0x4, 0x2, 0x2, 0x4, 0x1, 0x3, "a3f412da"}, 0x4, 0x4, {}, 0x80000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x7fff, 0x0, {{0x43, 0x4, 0x1, 0x3, 0x10c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@lsrr={0x83, 0x13, 0xae, [@private=0xa010100, @loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x7, [{@broadcast, 0x80000001}, {@loopback}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x7, [0xfff]}, @cipso={0x86, 0x23, 0x3, [{0x6, 0xa, "61550926944256b2"}, {0x5, 0xc, "69064a8f5f22341b15ba"}, {0x7, 0x7, "67531f7e11"}]}, @timestamp_prespec={0x44, 0x54, 0x2f, 0x3, 0x2, [{@multicast1, 0x9}, {@local, 0x5}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xd7b6}, {@remote, 0x7fff}, {@loopback, 0x3}, {@empty, 0x7fff}, {@private=0xa010102, 0xff}, {@empty, 0xff}]}, @end, @noop, @generic={0x43186efe9bb12611, 0x4, "8211"}, @rr={0x7, 0x23, 0x3b, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2, @private=0xa010100, @loopback, @multicast2]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x12, "e326d7144e51c5a0f2751cf1c0f12e94"}, {0x2, 0xd, "1ec371ae189f207da674ec"}, {0x6, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x7800, 0x20, 0x3ff, 0x3420, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0xfa, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@private=0xa010102, 0x4e51}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6bb}, {@rand_addr=0x64010102, 0x40}, {@remote, 0x20}, {@empty, 0x1}]}, @generic={0x44, 0x12, "0e2547fae38be83cabe35b9d220276bc"}, @rr={0x7, 0x7, 0xc2, [@empty]}, @cipso={0x86, 0x38, 0x1, [{0x2, 0x2}, {0x5, 0xd, "c96af373d165de8a07171b"}, {0x6, 0x12, "f008e250891853efc917a3937eccb10b"}, {0x2, 0x4, "a396"}, {0x7, 0xd, "2c1ad8f4741629142a37d9"}]}, @ssrr={0x89, 0xb, 0x43, [@multicast1, @loopback]}]}}}}}) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000e6dbdf25060000000c001000000000ffffffff86cb6a0081ffffffac003f000000000007000000d0b6e971ae8bd2c4000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) close$fd_v4l2_buffer(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x240083) 07:02:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0xa6d78e48ba431684) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/173) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000100)) close$fd_v4l2_buffer(r0) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x2, 0x4, 0xffba3c6212fd49c5, 0x8, {}, {0x4, 0x2, 0x2, 0x4, 0x1, 0x3, "a3f412da"}, 0x4, 0x4, {}, 0x80000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x7fff, 0x0, {{0x43, 0x4, 0x1, 0x3, 0x10c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@lsrr={0x83, 0x13, 0xae, [@private=0xa010100, @loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x7, [{@broadcast, 0x80000001}, {@loopback}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x7, [0xfff]}, @cipso={0x86, 0x23, 0x3, [{0x6, 0xa, "61550926944256b2"}, {0x5, 0xc, "69064a8f5f22341b15ba"}, {0x7, 0x7, "67531f7e11"}]}, @timestamp_prespec={0x44, 0x54, 0x2f, 0x3, 0x2, [{@multicast1, 0x9}, {@local, 0x5}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xd7b6}, {@remote, 0x7fff}, {@loopback, 0x3}, {@empty, 0x7fff}, {@private=0xa010102, 0xff}, {@empty, 0xff}]}, @end, @noop, @generic={0x43186efe9bb12611, 0x4, "8211"}, @rr={0x7, 0x23, 0x3b, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2, @private=0xa010100, @loopback, @multicast2]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x12, "e326d7144e51c5a0f2751cf1c0f12e94"}, {0x2, 0xd, "1ec371ae189f207da674ec"}, {0x6, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x7800, 0x20, 0x3ff, 0x3420, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0xfa, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@private=0xa010102, 0x4e51}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6bb}, {@rand_addr=0x64010102, 0x40}, {@remote, 0x20}, {@empty, 0x1}]}, @generic={0x44, 0x12, "0e2547fae38be83cabe35b9d220276bc"}, @rr={0x7, 0x7, 0xc2, [@empty]}, @cipso={0x86, 0x38, 0x1, [{0x2, 0x2}, {0x5, 0xd, "c96af373d165de8a07171b"}, {0x6, 0x12, "f008e250891853efc917a3937eccb10b"}, {0x2, 0x4, "a396"}, {0x7, 0xd, "2c1ad8f4741629142a37d9"}]}, @ssrr={0x89, 0xb, 0x43, [@multicast1, @loopback]}]}}}}}) 07:02:22 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x240083) 07:02:22 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000016c0)=@urb_type_iso={0x0, {0xa}, 0x1, 0x42, &(0x7f0000000040)="e40427e46eb6d30584c410c0fb28c97101b36aff0a65cd73d9ed830dc93e3dd32c0d1c255d263710c18ee9a161fe7bd5d981747f3e73ae82f29ff4db34391754e8652128c8c3a415334d29352c8d2d8d2e5e616bda4abf1805d08182ac9445e8bbf0aa4734529a817c17f787352595304acb523b76c2c0ae828b8de9cf8409d3895671650188877108576edcd4ab7f7544b0c3301aaa66a285554535922b53a263ce252e0d8af1c17d2912a6", 0xac, 0xfff, 0x2, 0x5c, 0x1, 0x471, &(0x7f00000006c0)="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", [{0x7fff, 0x1ff, 0x4}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0xffff}, {0x7ff, 0x5, 0x1}, {0x5, 0x800, 0x5}, {0xe17, 0x200, 0x1}, {0x10001, 0x7ff, 0x3a7}, {0x8, 0x4, 0x100}, {0x9, 0x5, 0xa9b}, {0xff9, 0x3, 0xffff}, {0x1ff, 0x445a, 0x3}, {0xfffffff8, 0x20, 0x4}, {0x4, 0x0, 0xffffffa2}, {0xb6b, 0x8001, 0x5}, {0x13, 0x9, 0x284}, {0x5, 0x4, 0xfffffe00}, {0x1ff, 0x5, 0x950d}, {0x7fff, 0xd76b, 0x3}, {0x8, 0x200, 0x7}, {0x2, 0x6, 0x80}, {0xc3, 0x0, 0x6}, {0xffffffff, 0x0, 0x5}, {0x1, 0x8001, 0x7fffffff}, {0x2, 0x0, 0x1}, {0x7, 0xd4, 0xffffe7d6}, {0x1f, 0x7, 0x3}, {0x0, 0x1ff, 0x81}, {0x909, 0x6, 0x3}, {0xfffffffa, 0x7, 0x4}, {0x6, 0x7, 0xffffff81}, {0x80000001, 0x2, 0x20}, {0x5, 0x3, 0x80000001}, {0x4, 0x1, 0x3}, {0xbd, 0x6}, {0x101, 0x9, 0x80}, {0x1ff, 0x5, 0x2}, {0x9, 0xffff, 0x3}, {0x101, 0x10001, 0xed1}, {0x400, 0x200, 0x3ff}, {0x2, 0xc00000, 0xffffffe1}, {0x7fffffff, 0x81, 0xbec}, {0x80000000, 0xff, 0x27}, {0x0, 0x0, 0x539}, {0xfffffffe, 0x2, 0x8}, {0x5, 0x5, 0x1}, {0x5, 0x8}, {0xa0, 0x7, 0x4}, {0xff800000, 0x8, 0x3}, {0x2, 0x42d7, 0x81}, {0x1, 0x10001, 0x99fc}, {0x5c9, 0x80000000, 0x6}, {0x80000000, 0x0, 0x4}, {0xcf0d, 0x401, 0x8}, {0x7, 0xfffffbff, 0x5c9}, {0x8, 0x1, 0x3}, {0x9, 0x2, 0x80}, {0x2, 0x7, 0x5}, {0x2d3b, 0x619, 0x198}, {0xc, 0x7d, 0x5}, {0x1, 0x7, 0x800000}, {0x9, 0x616f, 0xfffffffd}, {0x4, 0xfd, 0x8}, {0xffff, 0xc3fb, 0xfffffffa}, {0x3, 0x3, 0x7}, {0xfff, 0x3, 0x7}, {0x3, 0x8, 0x7}, {0x81, 0x6, 0x2400}, {0x4, 0x1, 0x1000}, {0x5, 0x400, 0x9}, {0x4, 0x9, 0x1000}, {0x5b7, 0xfffffffc, 0x1}, {0x4, 0x0, 0x5}, {0x4, 0x7, 0x1}, {0x20, 0x5, 0x3dc}, {0x100, 0x1, 0xb1cd}, {0x7, 0x7fff, 0xff}, {0x40, 0x0, 0x3}, {0x8, 0xfffffe01, 0x101}, {0x0, 0x1, 0x1}, {0x0, 0x401, 0x8}, {0x20, 0x200, 0x5e4c}, {0x7, 0x7ff, 0x1}, {0x7, 0x8, 0xfff}, {0xf4400000, 0x7}, {0x8, 0x1, 0x3e}, {0x1ff, 0x8, 0x8001}, {0xffffff9e, 0x1, 0x80}, {0x7, 0x0, 0x8}, {0x5, 0x40, 0x10001}, {0xf9c, 0x89, 0x7}, {0x0, 0x80000000, 0x3}, {0x8001, 0xffffffff, 0x578}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x80, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x0, 0x17, 0x5, 0x8, 0x65, 0x40, &(0x7f0000000140)="7cbed75dcb00651120b5cbe0477353acc32ef0cd67f973638d22936ad2f00f2d720fcb01e2fd02d78fdcdc05063063a4e96df4be96560341f16ddd66d89b92f0edfac20b13d962b87ea8a8b94d0031d3a882821a2b4427272fa020c7321d773ce194eca9c8"}) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:22 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) 07:02:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x2, 0x4, 0xffba3c6212fd49c5, 0x8, {}, {0x4, 0x2, 0x2, 0x4, 0x1, 0x3, "a3f412da"}, 0x4, 0x4, {}, 0x80000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x7fff, 0x0, {{0x43, 0x4, 0x1, 0x3, 0x10c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@lsrr={0x83, 0x13, 0xae, [@private=0xa010100, @loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x7, [{@broadcast, 0x80000001}, {@loopback}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x7, [0xfff]}, @cipso={0x86, 0x23, 0x3, [{0x6, 0xa, "61550926944256b2"}, {0x5, 0xc, "69064a8f5f22341b15ba"}, {0x7, 0x7, "67531f7e11"}]}, @timestamp_prespec={0x44, 0x54, 0x2f, 0x3, 0x2, [{@multicast1, 0x9}, {@local, 0x5}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xd7b6}, {@remote, 0x7fff}, {@loopback, 0x3}, {@empty, 0x7fff}, {@private=0xa010102, 0xff}, {@empty, 0xff}]}, @end, @noop, @generic={0x43186efe9bb12611, 0x4, "8211"}, @rr={0x7, 0x23, 0x3b, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2, @private=0xa010100, @loopback, @multicast2]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x12, "e326d7144e51c5a0f2751cf1c0f12e94"}, {0x2, 0xd, "1ec371ae189f207da674ec"}, {0x6, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x7800, 0x20, 0x3ff, 0x3420, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102, {[@timestamp_addr={0x44, 0x44, 0xfa, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@private=0xa010102, 0x4e51}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6bb}, {@rand_addr=0x64010102, 0x40}, {@remote, 0x20}, {@empty, 0x1}]}, @generic={0x44, 0x12, "0e2547fae38be83cabe35b9d220276bc"}, @rr={0x7, 0x7, 0xc2, [@empty]}, @cipso={0x86, 0x38, 0x1, [{0x2, 0x2}, {0x5, 0xd, "c96af373d165de8a07171b"}, {0x6, 0x12, "f008e250891853efc917a3937eccb10b"}, {0x2, 0x4, "a396"}, {0x7, 0xd, "2c1ad8f4741629142a37d9"}]}, @ssrr={0x89, 0xb, 0x43, [@multicast1, @loopback]}]}}}}}) 07:02:22 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208300) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private1, @broadcast, 0x1e, 0x1e}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x7ff, 0x1e, &(0x7f0000000100)="aaa796672e7326167621812765d0827b7d9ae1c04e72f94172a9677acc87", 0x20, 0x4, 0xf080, 0x3, 0x0, 0x2, 0x87, 'syz0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) personality(0x400000a) 07:02:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:22 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000016c0)=@urb_type_iso={0x0, {0xa}, 0x1, 0x42, &(0x7f0000000040)="e40427e46eb6d30584c410c0fb28c97101b36aff0a65cd73d9ed830dc93e3dd32c0d1c255d263710c18ee9a161fe7bd5d981747f3e73ae82f29ff4db34391754e8652128c8c3a415334d29352c8d2d8d2e5e616bda4abf1805d08182ac9445e8bbf0aa4734529a817c17f787352595304acb523b76c2c0ae828b8de9cf8409d3895671650188877108576edcd4ab7f7544b0c3301aaa66a285554535922b53a263ce252e0d8af1c17d2912a6", 0xac, 0xfff, 0x2, 0x5c, 0x1, 0x471, &(0x7f00000006c0)="4ecf920b1c804ed46fbabbed189994db17b06bd1c69e327b09289afe1cc9ae9f638caf206e1ee6ce26389ae93f718ee57b375e1fb161501e070686ec4bdb3dedb64e8d2289ef3ebe7f9ff0aa0aa334b44fe70966be5b1dd9ed29a61d3477c38e256119e608938cab7e84074bc3f720a9331a556d327794e2d31945cd292b0a60a536198e50062286e97e93a5d41e71758385ed21d9c3d1d13e1b9edd9db9754b6c215e1a22efe2ac5b6530456af81d1811873a4ad053c888074100fb93a51ee208db0ff5e3b8448c14ec067428ca5c5f4f72f594367e8136fbf597b646e5d830a95ef2b5ca69b1461a072cb2e2fd8da2664647eb023a54c0d41d519c54dedce973e79dc799329e8c70ff1a5837f8b6c392c965d1cc7550f47feab857e8c869e3e22861b6a0316192ff5206ff609bd6ab37d6168175597965644296f0df4f3a22f6fd2f0768554d97deaeda0914b7b08c7b6d1009cfeab6a3bcba6656242f0723760f943c662f06a23a3f209f0923f53184605b1749c258cb6115760758ee6cb68f210fd620e393ef03ce6b4911bada942042e696e9677998aaef2b78aafb02e02b578b71e6e984cdf9078c9f9007b980b03a943807a5fdacea98395c52871d7b3e4898fbd8b9f42a878217d97c07245c55b65e0295d79379c52b41eed949f32423f38828e25fb4adc32883c615a750b37a6977f7864bec5edb5ff0e8a38d44c1f401c8c303f9c189e56a4d9b68a61953ac33962053261b6d117ad3a4aea85eb74b193b6e293a5124a0fe60fc07abf8848d48cbe60be566f4be53f46ace86c9e435299794ab87ffab6f50b459d83be8fb25c155073ec053ab3cd3ccdd032b12ff5b0e782c891ebf255d77a87ff0b80b1ed3e2e15bda98aa10cbd53e3d68b8c258be3481ca3630907f04fcfeb579e6d3e7edee40c13770019bf58abab6244fa891e2ad6470852725f9379b9a351cdfaf51c835be49cd03c371f69f25c1165495dee1ca209dcc94517b31f2e4fd537331509594b6ca736d9bc843cc5040058767c9936f45ae08b75e7cf759d1150d4bbf77aa101561ecb330f2c96106207f8af2bdd5d88499e668f847c40ca55be0c0a555492f4b9816cb81c8cbe665e0418689212ebb2979d897b32f5918eefb6e0b07ad2a40ae71edaa704c1a37b5a6e2e0dca2e37ffe9550bc2c80fbeb05d7685b28302b7d159aceff48d3c9c0ec0837b5255be3c388ee3adc4dc4ab572b03d6b9eea4c8c1e044a1d9133e1015ce90475a9bee463598828c3b2baa62d1d49ed83f64fa2ed5b6f623af95f5c29becdd04b309cae51df5a9178508e04ad093cf6dd5dc24fff2b6345a3ccae1b49ef1be65230226615c712478d3a5feb1173e2fe40c861a3e3de16a60255fb391a7fa3debc02ac072a56ad6ae065c9f96ae1662fbe01b870c79052e16824f096c22d27b100f2bebce3582fb4b718129fa56019728380aa3f769118c3fe414e3e0fd68f8e2fd3be49ee12b23520bf5094be3bfe1e866e2dfd88dbdbf516b10795b9a07c74561302ba1b26890d0a15834759dfeca4e3293560c5a7684e13c1b08e0ebd3a964ac1c1c32f341189490892d3e175c54af5008d18f79e3db1555495f3e7efbdaab347139be0330097ff3fdb33d7112d63c40de2936111ca367f32feafd563ca224a2249a24c669617e225b054576f4c519edaf2e8b3a2534696b3144b316ad96fa7fd43733771f3f53196228595c1de1777042d60843b74cbd23e370d3f055a7e7a664454ec007189af0a564af905c7324bfa818aeb366a247b0a2512951643bb1a471fd3571e98b553b7b87a40658ef5bc061f3218c7f4fff0ee377c91f1718ebbd17ec6d1707dd21906045d5c5fbbc6b134ed17954ac9e91eed439d59b24c568502f754e1d3cc676afe808d22db0141305d8da3bb7145544019321957bbe7d5540ef692f90f45dedd984df148546b3690a02664c7d8c58e416595413a3f89ddb3872378db9f2bc73c985a3772d7a6ae6b3e29c796c751db4f04017ebf318f4b618e2c2a835a76c6094742bd5032da4fe4dd34f1739603861c6f624c6317e2b7a3f4892f214295f10b62fdc9cdf1a8450e9249df914bcc0196658733e27ed643b135e880ba1c54487e8ce4542a88e2ee64ba0931a05b62ac730e667ff9c6e61272d8a8d35a45c7d274f90ed22bc20d2108dc970f0eba543c8201d302595c5bd135de6c35093b1f823a50c948f074efb2471d856294f8167028044f1edcf02e67c96d3c077e32b5aa5ed8d6be7ecfd20a583d83cee544b5249c6b8542ba5a9c0243ef1a710beb25fc6c52b8d779712e6b65fe3e7d3401d334102bc64dd7d7e29b1a5efa04777a1df64d91fa437d384e003bd184ac44b7843278342e13e7ef5c0cb16de834ee2fd45be0c24b5b5e9bd66274a6eef1d1fba88a97b9c5416a9ac92501a6a05435952f4c9eaf4343b23862e7b8210d80bd6ef3fb55a156e5b98bac5b8c122e2a0291d3bb4171a95e451fd29a51a3c959a27452d37b7d3cc9c7f4bb3d10be5c4598466344d22352bdef361884fd65c16c85ad8c5e859944403cf531b51e5c5fde8102bf95d2a49768d42773c2e5533ef0607df6e1c0716e085e5af36a288b7271630671b58a8e5f3814a4226a624ae8273de85720b473fb6bc4c27afc416810dadd8e0a18ec44d5c5a83940480863113348f0eb26ea93df4ad8faffea4cd4b51feda1d3ec3a1479229d839ea3c007768f5f31532cd3813f5405b98ed30333367680011eef30f8c140eee9308c6a4f01a3a63384146512eba31736712a617b39d7f117ca8612d5bb1da5d5d169c5380b683d0b1360a233e08d733c06166eeba9e91fe9262083bfe8d9bd602a0799b5e9c4f1546d12cf42f0589fc45b44187dde4cb4294a5c1abe2a8d0ca234901a45afdfebabdc8fb4347fc5d5c1edcc798684e2af1b9e97c183530231e53a3047582bf11a4d14460b59d879e7aa7b3508dde3f90cc4c6757ea4c598914139682431cd22ccc5b2e4c3e0fe490efac6a5431b1e326d05badc19b346173dd1e383c8e8772f8531ba9c2abf573f22041a761674a81a6e58831577b3eccfcfc8ad4707c2374a0804220bf089334612cbfb68010c1ee4b204ebb1f5ba4fae13d7b3d70097022bcb4535ab5ab64b7bab8afb846b74b01d8edc3fe0771dfa65243591d728afe86dd9d44beaa1e92382e58860ebc8bf4c82d24af161029c876dc5c14c41f7f397ee90a42b9e64a1c3c0c9096ceb6581eac7f4c5b05de50aae4ee47626dfeb077fa0386ca3e215e00f8527d5d74646baa9e5650ae87b2ef77821fe38a9a5fd87074241a316f43928691c8dde40c65275823e82ee0855b7a4b82d89ca34cce8c227867d5f9831e2ab7e9d8d4c7e4a1670775579301a8518169edd7f278fb40b047793efe96440655e03831c6f9701d028b6f82244c78d30b2182b66a5d6ffc955650898654a4386d5cc3b2ab322c5c27a33aa5089b9ac8a4fc157ea45365da2e9235ccd09259035f11614708ec4054f2161dfa9c56e11f0308be3a4ebc303e78ca8091e7a032a844668c350142fdeabddcfc60fbdb0860f1b0bc106742c30f34f3e9bc43577d4f231e08d2744945f852e6a17ffaf835c9725f2b2b9f985d72a7725910b88ea2560c0bdb58565a0984b24df70c802e2c6c7c0fda56af94f9c7e5212d6e0887b9abf1f74fb6e045f18819760273b67d39aa41202267cb7e5da7c3c4a8392f000c798a7fd47e1e50e4d4ab71eebafc7bba2f00d387b4fb1ec889fc65062f145bfcec987ec74af6ce3f93a9ff726bf8e7135d3c860356846afde59fc19c145368ad2e7193bffc5e1dadfcdbd5e61cd6edab8f85c7e5d7c541b47078f9d0070136e8d9d8888c042a0ea7968c12b805287e54f538c0843f654029cedc640f701545198c1476fadf7cf61e9788fa71651918f7ade7116288c0d5b27a0e327d7da31c9a10f32612e8cf1dc3d3d1233f0a0bfe76d8f31e00454eb2ba4e6875a256d255aee12d2a19e3db57df14bea84b47d3b7951336b35d1fb173cc9483382b94513fd84afeb53d33ddbe5085bcad4f521e1f97e37367d3accba56570c1985f0cb5706384c67e2cb2fe9934b5c67044f59434df5d246f6e1be18c4f944ba67474853a9c192ff9250411708334349abc56de9c0dec641b9dabd5902d17041d248c9c672ba5e3ce4ee13b91d0253ec3aacbf4d8c42779f36c5b9faaeb391f543cbc16590bd6466f9fba9faae21c77ee506308aa876a43c6607e7d264f58de0650b79b6d84a9d670f14b38d55e2c5a4ce733bd8e1924ae972d643cebf3b4edd984f7b9bd516509abc30dbbed32d91e49d885183de53e0c08a5b63c35f8f16506ef109c6501d6ea546509328e07ac64866f3facb474b1e9ec65689f0b9658df3e3932e7055fd979c2e85f61af5e89718099276f599fc9fbbbc6a576a0cd8579a56a93a99c6eba027b3a48f5109db75763175a05eb3ad6e3f2aacb4b5b0bdc282081fc83378bec68ffc7c475eb1101e242b2f5a2b1a619280a4fd4980b3868556209c5de9847fee3b3d17df0c619468e0790da09d6116dc50535195f983994e9e6fcd9cb01524fa64e728bac847f97aa0e0e3837d1880ba9cd239bd96834df817e1e65be059620e80a10564cbcbaf8575072489eaecac12fdac776b535bbfdedf6603a9c6abd8ab86e938b82eae8ce89d4f65ae4654dd72cef83894f6f5dabd3ee50d9bc0117bdc7980dd0c5e3cc85031e0c188ef05a39966f93cb495c5de31174f78585c5408928e4cce15ebea31f5251a4534bdfb347ebdc4ba835132a6dbceefd3c43096a93f00da496c33a739ea8b8af7592207561d802c188fbaf5f062cfab9eaafb3cc6701fdd586232b70ca85736854b3194ac19fc61e7937418094390ed704347afca4cf663e2c92e990f416a5b427e4757bba66b7609c235637dbdeed13464b6d5ad8ebf2b834b3944eff052ddc910dab5e76be15695317fb19cb3d1f829472d4eab805cfd2350b5c9c69793ed5fd02ccf1fa3b85b5e6e77ad4be167bdc0eafc954ae8f7ebb0207865afac097c155136092367e24c933366e240822c6900cb4f03b9347ccaa2234328bd49a24525983446b5a8427178af6143baa8b54d5a786139a31aa88bbcba0a888b830f8a7b5139feaef20554809cd517291f9d6485e119d45bdf2aeea069568ed48b69473167a2848769c95c3e0cbbb2bd9a598c94cda94f65fb63d0bf317035cc48d9c3a669e2465b55466657591ba835009bfa64f5a13f3c48487257f2996cbf114d335465dd344f760950cb5cd606e0a9980385ec3522f7e36a00055adc10d8f3ff647193185443eca96be0490bf71762086295fc89897c67686d9df3f28fcfc0ef015254619ee13c254a46a4043c4f2cb8303b39549cad5ae0d03a6ac00c063c5a756e6e5c1361ab4c5981b9b411a44e1bd718d5666b03885f0af76b8b505cf1731fec7dd3dfce5616a67838b68110d53b889105e1a645364957d6347b00d93fbfd9c735650d5ca0b72fe71015ca675ae9133431fd029a35db4e1cbf3b61ffb65ef302dc45e7471ac75373976f214c137066e2f1791e60f0faa6689c398402ff7b1b0573d35cd8ccf4a08554f75e66d388421bf2cdfad8e992047c33335d9d5a1ae12f12f0d5adea1d02f5a93540388e0110f7850c7673404042bcfef40ff16c349f5ca7e38b40881f729fb050cc73a89f8e0f7ccfeed453ba01ce12f0189f6e988dbdd79135a368d94001121c0bc360ae5f4499f42bdbd7a00813753d037da9880ab", [{0x7fff, 0x1ff, 0x4}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0xffff}, {0x7ff, 0x5, 0x1}, {0x5, 0x800, 0x5}, {0xe17, 0x200, 0x1}, {0x10001, 0x7ff, 0x3a7}, {0x8, 0x4, 0x100}, {0x9, 0x5, 0xa9b}, {0xff9, 0x3, 0xffff}, {0x1ff, 0x445a, 0x3}, {0xfffffff8, 0x20, 0x4}, {0x4, 0x0, 0xffffffa2}, {0xb6b, 0x8001, 0x5}, {0x13, 0x9, 0x284}, {0x5, 0x4, 0xfffffe00}, {0x1ff, 0x5, 0x950d}, {0x7fff, 0xd76b, 0x3}, {0x8, 0x200, 0x7}, {0x2, 0x6, 0x80}, {0xc3, 0x0, 0x6}, {0xffffffff, 0x0, 0x5}, {0x1, 0x8001, 0x7fffffff}, {0x2, 0x0, 0x1}, {0x7, 0xd4, 0xffffe7d6}, {0x1f, 0x7, 0x3}, {0x0, 0x1ff, 0x81}, {0x909, 0x6, 0x3}, {0xfffffffa, 0x7, 0x4}, {0x6, 0x7, 0xffffff81}, {0x80000001, 0x2, 0x20}, {0x5, 0x3, 0x80000001}, {0x4, 0x1, 0x3}, {0xbd, 0x6}, {0x101, 0x9, 0x80}, {0x1ff, 0x5, 0x2}, {0x9, 0xffff, 0x3}, {0x101, 0x10001, 0xed1}, {0x400, 0x200, 0x3ff}, {0x2, 0xc00000, 0xffffffe1}, {0x7fffffff, 0x81, 0xbec}, {0x80000000, 0xff, 0x27}, {0x0, 0x0, 0x539}, {0xfffffffe, 0x2, 0x8}, {0x5, 0x5, 0x1}, {0x5, 0x8}, {0xa0, 0x7, 0x4}, {0xff800000, 0x8, 0x3}, {0x2, 0x42d7, 0x81}, {0x1, 0x10001, 0x99fc}, {0x5c9, 0x80000000, 0x6}, {0x80000000, 0x0, 0x4}, {0xcf0d, 0x401, 0x8}, {0x7, 0xfffffbff, 0x5c9}, {0x8, 0x1, 0x3}, {0x9, 0x2, 0x80}, {0x2, 0x7, 0x5}, {0x2d3b, 0x619, 0x198}, {0xc, 0x7d, 0x5}, {0x1, 0x7, 0x800000}, {0x9, 0x616f, 0xfffffffd}, {0x4, 0xfd, 0x8}, {0xffff, 0xc3fb, 0xfffffffa}, {0x3, 0x3, 0x7}, {0xfff, 0x3, 0x7}, {0x3, 0x8, 0x7}, {0x81, 0x6, 0x2400}, {0x4, 0x1, 0x1000}, {0x5, 0x400, 0x9}, {0x4, 0x9, 0x1000}, {0x5b7, 0xfffffffc, 0x1}, {0x4, 0x0, 0x5}, {0x4, 0x7, 0x1}, {0x20, 0x5, 0x3dc}, {0x100, 0x1, 0xb1cd}, {0x7, 0x7fff, 0xff}, {0x40, 0x0, 0x3}, {0x8, 0xfffffe01, 0x101}, {0x0, 0x1, 0x1}, {0x0, 0x401, 0x8}, {0x20, 0x200, 0x5e4c}, {0x7, 0x7ff, 0x1}, {0x7, 0x8, 0xfff}, {0xf4400000, 0x7}, {0x8, 0x1, 0x3e}, {0x1ff, 0x8, 0x8001}, {0xffffff9e, 0x1, 0x80}, {0x7, 0x0, 0x8}, {0x5, 0x40, 0x10001}, {0xf9c, 0x89, 0x7}, {0x0, 0x80000000, 0x3}, {0x8001, 0xffffffff, 0x578}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x80, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x0, 0x17, 0x5, 0x8, 0x65, 0x40, &(0x7f0000000140)="7cbed75dcb00651120b5cbe0477353acc32ef0cd67f973638d22936ad2f00f2d720fcb01e2fd02d78fdcdc05063063a4e96df4be96560341f16ddd66d89b92f0edfac20b13d962b87ea8a8b94d0031d3a882821a2b4427272fa020c7321d773ce194eca9c8"}) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x50b040, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@none, 0xffffffff}) close$fd_v4l2_buffer(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002600000127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x735d1b61b4c3f20b) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:23 executing program 5: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000016c0)=@urb_type_iso={0x0, {0xa}, 0x1, 0x42, &(0x7f0000000040)="e40427e46eb6d30584c410c0fb28c97101b36aff0a65cd73d9ed830dc93e3dd32c0d1c255d263710c18ee9a161fe7bd5d981747f3e73ae82f29ff4db34391754e8652128c8c3a415334d29352c8d2d8d2e5e616bda4abf1805d08182ac9445e8bbf0aa4734529a817c17f787352595304acb523b76c2c0ae828b8de9cf8409d3895671650188877108576edcd4ab7f7544b0c3301aaa66a285554535922b53a263ce252e0d8af1c17d2912a6", 0xac, 0xfff, 0x2, 0x5c, 0x1, 0x471, &(0x7f00000006c0)="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", [{0x7fff, 0x1ff, 0x4}, {0x0, 0x4, 0x7}, {0x0, 0x4, 0xffff}, {0x7ff, 0x5, 0x1}, {0x5, 0x800, 0x5}, {0xe17, 0x200, 0x1}, {0x10001, 0x7ff, 0x3a7}, {0x8, 0x4, 0x100}, {0x9, 0x5, 0xa9b}, {0xff9, 0x3, 0xffff}, {0x1ff, 0x445a, 0x3}, {0xfffffff8, 0x20, 0x4}, {0x4, 0x0, 0xffffffa2}, {0xb6b, 0x8001, 0x5}, {0x13, 0x9, 0x284}, {0x5, 0x4, 0xfffffe00}, {0x1ff, 0x5, 0x950d}, {0x7fff, 0xd76b, 0x3}, {0x8, 0x200, 0x7}, {0x2, 0x6, 0x80}, {0xc3, 0x0, 0x6}, {0xffffffff, 0x0, 0x5}, {0x1, 0x8001, 0x7fffffff}, {0x2, 0x0, 0x1}, {0x7, 0xd4, 0xffffe7d6}, {0x1f, 0x7, 0x3}, {0x0, 0x1ff, 0x81}, {0x909, 0x6, 0x3}, {0xfffffffa, 0x7, 0x4}, {0x6, 0x7, 0xffffff81}, {0x80000001, 0x2, 0x20}, {0x5, 0x3, 0x80000001}, {0x4, 0x1, 0x3}, {0xbd, 0x6}, {0x101, 0x9, 0x80}, {0x1ff, 0x5, 0x2}, {0x9, 0xffff, 0x3}, {0x101, 0x10001, 0xed1}, {0x400, 0x200, 0x3ff}, {0x2, 0xc00000, 0xffffffe1}, {0x7fffffff, 0x81, 0xbec}, {0x80000000, 0xff, 0x27}, {0x0, 0x0, 0x539}, {0xfffffffe, 0x2, 0x8}, {0x5, 0x5, 0x1}, {0x5, 0x8}, {0xa0, 0x7, 0x4}, {0xff800000, 0x8, 0x3}, {0x2, 0x42d7, 0x81}, {0x1, 0x10001, 0x99fc}, {0x5c9, 0x80000000, 0x6}, {0x80000000, 0x0, 0x4}, {0xcf0d, 0x401, 0x8}, {0x7, 0xfffffbff, 0x5c9}, {0x8, 0x1, 0x3}, {0x9, 0x2, 0x80}, {0x2, 0x7, 0x5}, {0x2d3b, 0x619, 0x198}, {0xc, 0x7d, 0x5}, {0x1, 0x7, 0x800000}, {0x9, 0x616f, 0xfffffffd}, {0x4, 0xfd, 0x8}, {0xffff, 0xc3fb, 0xfffffffa}, {0x3, 0x3, 0x7}, {0xfff, 0x3, 0x7}, {0x3, 0x8, 0x7}, {0x81, 0x6, 0x2400}, {0x4, 0x1, 0x1000}, {0x5, 0x400, 0x9}, {0x4, 0x9, 0x1000}, {0x5b7, 0xfffffffc, 0x1}, {0x4, 0x0, 0x5}, {0x4, 0x7, 0x1}, {0x20, 0x5, 0x3dc}, {0x100, 0x1, 0xb1cd}, {0x7, 0x7fff, 0xff}, {0x40, 0x0, 0x3}, {0x8, 0xfffffe01, 0x101}, {0x0, 0x1, 0x1}, {0x0, 0x401, 0x8}, {0x20, 0x200, 0x5e4c}, {0x7, 0x7ff, 0x1}, {0x7, 0x8, 0xfff}, {0xf4400000, 0x7}, {0x8, 0x1, 0x3e}, {0x1ff, 0x8, 0x8001}, {0xffffff9e, 0x1, 0x80}, {0x7, 0x0, 0x8}, {0x5, 0x40, 0x10001}, {0xf9c, 0x89, 0x7}, {0x0, 0x80000000, 0x3}, {0x8001, 0xffffffff, 0x578}]}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x80, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x0, 0x17, 0x5, 0x8, 0x65, 0x40, &(0x7f0000000140)="7cbed75dcb00651120b5cbe0477353acc32ef0cd67f973638d22936ad2f00f2d720fcb01e2fd02d78fdcdc05063063a4e96df4be96560341f16ddd66d89b92f0edfac20b13d962b87ea8a8b94d0031d3a882821a2b4427272fa020c7321d773ce194eca9c8"}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208300) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private1, @broadcast, 0x1e, 0x1e}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x7ff, 0x1e, &(0x7f0000000100)="aaa796672e7326167621812765d0827b7d9ae1c04e72f94172a9677acc87", 0x20, 0x4, 0xf080, 0x3, 0x0, 0x2, 0x87, 'syz0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) personality(0x400000a) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208300) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private1, @broadcast, 0x1e, 0x1e}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x7ff, 0x1e, &(0x7f0000000100)="aaa796672e7326167621812765d0827b7d9ae1c04e72f94172a9677acc87", 0x20, 0x4, 0xf080, 0x3, 0x0, 0x2, 0x87, 'syz0\x00'}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) personality(0x400000a) (async) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x50b040, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@none, 0xffffffff}) close$fd_v4l2_buffer(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002600000127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x735d1b61b4c3f20b) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x50b040, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@none, 0xffffffff}) (async) close$fd_v4l2_buffer(r0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002600000127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x735d1b61b4c3f20b) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) (async) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffffffc, 0x44881) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x7c1b00, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x1, {0x1000, 0x101, 0xfffffeff, 0x4, 0x3, 0x1}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208300) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private1, @broadcast, 0x1e, 0x1e}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x7ff, 0x1e, &(0x7f0000000100)="aaa796672e7326167621812765d0827b7d9ae1c04e72f94172a9677acc87", 0x20, 0x4, 0xf080, 0x3, 0x0, 0x2, 0x87, 'syz0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) personality(0x400000a) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208300) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private1, @broadcast, 0x1e, 0x1e}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x7ff, 0x1e, &(0x7f0000000100)="aaa796672e7326167621812765d0827b7d9ae1c04e72f94172a9677acc87", 0x20, 0x4, 0xf080, 0x3, 0x0, 0x2, 0x87, 'syz0\x00'}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) personality(0x400000a) (async) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffffffc, 0x44881) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x7c1b00, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x1, {0x1000, 0x101, 0xfffffeff, 0x4, 0x3, 0x1}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x50b040, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@none, 0xffffffff}) close$fd_v4l2_buffer(r0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002600000127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x735d1b61b4c3f20b) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x50b040, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={@none, 0xffffffff}) (async) close$fd_v4l2_buffer(r0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002600000127bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x735d1b61b4c3f20b) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xfffffffffffffffc, 0x44881) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x7c1b00, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x1, {0x1000, 0x101, 0xfffffeff, 0x4, 0x3, 0x1}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100, 0xfffffff7, {r2, r3/1000+60000}, {0x1, 0x1, 0x1, 0x7, 0x4, 0x3, "bd1700b4"}, 0x7, 0x4, {}, 0x3}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x15) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) close$fd_v4l2_buffer(r0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) (async, rerun: 32) close$fd_v4l2_buffer(r0) (async, rerun: 32) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100, 0xfffffff7, {r2, r3/1000+60000}, {0x1, 0x1, 0x1, 0x7, 0x4, 0x3, "bd1700b4"}, 0x7, 0x4, {}, 0x3}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100, 0xfffffff7, {r2, r3/1000+60000}, {0x1, 0x1, 0x1, 0x7, 0x4, 0x3, "bd1700b4"}, 0x7, 0x4, {}, 0x3}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x15) (async) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x125000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x1, 0x6, 0x6bea, 0x200, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) r1 = socket(0x18, 0x800, 0xffff438b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x10, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fefbdf250300000006001b004e2300000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="6699c9ea", @ANYRES16=0x0, @ANYBLOB="800128bd7000fcdbdf25020000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000400)={0x5, 0x7ff, 0x401, 0x4, 0x1}) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) close$fd_v4l2_buffer(r0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) (async) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x125000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x1, 0x6, 0x6bea, 0x200, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) r1 = socket(0x18, 0x800, 0xffff438b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x10, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fefbdf250300000006001b004e2300000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x125000, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x1, 0x6, 0x6bea, 0x200, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) (async) socket(0x18, 0x800, 0xffff438b) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x10, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fefbdf250300000006001b004e2300000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) (async) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100, 0xfffffff7, {r2, r3/1000+60000}, {0x1, 0x1, 0x1, 0x7, 0x4, 0x3, "bd1700b4"}, 0x7, 0x4, {}, 0x3}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100, 0xfffffff7, {r2, r3/1000+60000}, {0x1, 0x1, 0x1, 0x7, 0x4, 0x3, "bd1700b4"}, 0x7, 0x4, {}, 0x3}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x15) (async) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="6699c9ea", @ANYRES16=0x0, @ANYBLOB="800128bd7000fcdbdf25020000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000400)={0x5, 0x7ff, 0x401, 0x4, 0x1}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="6699c9ea", @ANYRES16=0x0, @ANYBLOB="800128bd7000fcdbdf25020000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) (async) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000400)={0x5, 0x7ff, 0x401, 0x4, 0x1}) (async) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x125000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x1, 0x6, 0x6bea, 0x200, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) (async) r1 = socket(0x18, 0x800, 0xffff438b) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x10, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fefbdf250300000006001b004e2300000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101003, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0xa0, 0x80, 0x341c, 0x1, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x66, 0x0, 0x3f, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x7, [{@multicast1, 0x1ff}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0xe, [{@local, 0x8001}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', r2, 0x8, 0x80, 0x80, 0xe3, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0xde, 0x4, 0x0, @multicast1, @private=0xa010102, {[@generic={0x86, 0x5, "b8ee73"}]}}}}}) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r4, 0x8000, 0x10, 0x4, 0x8, {{0x6, 0x4, 0x2, 0xa, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="6699c9ea", @ANYRES16=0x0, @ANYBLOB="800128bd7000fcdbdf25020000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000400)={0x5, 0x7ff, 0x401, 0x4, 0x1}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000440)={@none, 0x2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="6699c9ea", @ANYRES16=0x0, @ANYBLOB="800128bd7000fcdbdf25020000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) (async) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000400)={0x5, 0x7ff, 0x401, 0x4, 0x1}) (async) 07:02:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xb0b, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x5c, 0x20, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x80, 0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_FLOW={0x8, 0xb, 0x58}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_FLOW={0x8, 0xb, 0x80000005}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) 07:02:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) getpgid(0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) (async) close$fd_v4l2_buffer(r0) (async) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101003, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0xa0, 0x80, 0x341c, 0x1, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x66, 0x0, 0x3f, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x7, [{@multicast1, 0x1ff}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0xe, [{@local, 0x8001}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', r2, 0x8, 0x80, 0x80, 0xe3, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0xde, 0x4, 0x0, @multicast1, @private=0xa010102, {[@generic={0x86, 0x5, "b8ee73"}]}}}}}) (async) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r4, 0x8000, 0x10, 0x4, 0x8, {{0x6, 0x4, 0x2, 0xa, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@end]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xb0b, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x5c, 0x20, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x80, 0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_FLOW={0x8, 0xb, 0x58}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_FLOW={0x8, 0xb, 0x80000005}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) 07:02:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) (async, rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5796add7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0xb0b, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x5c, 0x20, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x80, 0x2, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_FLOW={0x8, 0xb, 0x58}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_FLOW={0x8, 0xb, 0x80000005}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4004000) (async) socket$nl_generic(0x10, 0x3, 0x10) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101003, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0xa0, 0x80, 0x341c, 0x1, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x66, 0x0, 0x3f, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x7, [{@multicast1, 0x1ff}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0xc, 0x8d, 0x3, 0xe, [{@local, 0x8001}]}]}}}}}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', r2, 0x8, 0x80, 0x80, 0xe3, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0xde, 0x4, 0x0, @multicast1, @private=0xa010102, {[@generic={0x86, 0x5, "b8ee73"}]}}}}}) (async) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', r4, 0x8000, 0x10, 0x4, 0x8, {{0x6, 0x4, 0x2, 0xa, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @multicast2, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5796add7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x545a02) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5796add7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5796add7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040c0}, 0x4) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x2, 0x5f82, 0x8, 0x1, 0x2}) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x545a02) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:23 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket(0x2a, 0x80000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x2, 0x5f82, 0x8, 0x1, 0x2}) 07:02:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 07:02:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:23 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x545a02) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) close$fd_v4l2_buffer(r0) (rerun: 32) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket(0x2a, 0x80000, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) (async) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x2, 0x5f82, 0x8, 0x1, 0x2}) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x10000, 0x22202) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000080)=""/107) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="76f39751184fd465003c9a0000"]) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000200)=""/234) 07:02:24 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x2c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x4, 0x20, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x401}, @NDA_MASTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @dev, {[@cipso={0x86, 0x6}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x2c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x4, 0x20, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x401}, @NDA_MASTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x2c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x4, 0x20, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x401}, @NDA_MASTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket(0x2a, 0x80000, 0x0) (async) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x10000, 0x22202) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000080)=""/107) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="76f39751184fd465003c9a0000"]) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7) (async) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000200)=""/234) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x3f, 0x2, 0x5cbf) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20080040) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 07:02:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @dev, {[@cipso={0x86, 0x6}]}}}}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) 07:02:24 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x2c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x4, 0x20, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x401}, @NDA_MASTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x2c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x4, 0x20, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x401}, @NDA_MASTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x10000, 0x22202) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000080)=""/107) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="76f39751184fd465003c9a0000"]) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000200)=""/234) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x10000, 0x22202) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000080)=""/107) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="76f39751184fd465003c9a0000"]) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x7) (async) close$fd_v4l2_buffer(r0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000200)=""/234) (async) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x3f, 0x2, 0x5cbf) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20080040) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async, rerun: 64) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 07:02:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @dev, {[@cipso={0x86, 0x6}]}}}}}) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 64) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x448381) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6}) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x3f, 0x2, 0x5cbf) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20080040) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) socket(0x3f, 0x2, 0x5cbf) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20080040) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x18) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x448381) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x448381) (async) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6}) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x448381) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x448381) (async) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1d) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1d) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1d) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:24 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3, {0x19, 0x8, 0x1, 0x7, 0x0, 0xff}}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x31}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000) 07:02:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (rerun: 64) 07:02:24 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3, {0x19, 0x8, 0x1, 0x7, 0x0, 0xff}}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x31}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3, {0x19, 0x8, 0x1, 0x7, 0x0, 0xff}}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000300)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x31}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000) (async) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6}) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x6}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1d) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x12c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x7f, 0xa8, @random="dfc9b2d0b3743a0642b3e0d6ec525423b7c394d565d00044f38509415c3a76e762bd82c3438e90c794e23f085ff1ce01fada0574b8b93e371588c6619834817c9fbc72ef43f363b2335d44ddc605e79a86e96ce440940cf80e61a28dee1de46a8a5bed8e211fcffaebcca9aa094f1350bc15c0ea1bb575be6442e0"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x12c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, r2, 0x20, 0x4, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x1800) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x7, 0x0, 0x7, 0x1, 'syz0\x00', 0xc0}, 0x5, 0x213, 0x45d, 0x0, 0x1, 0x2, 'syz0\x00', &(0x7f00000000c0)=['/dev/nvram\x00'], 0xb}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x0, 0xa8000, {{0x9, 0x4, 0x0, 0x17, 0x24, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x44, 0xf, "a119895044c047a8022edbb6f8"}]}}}}}) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f00000004c0)={'full', 0x20, 0x0, 0x20, 0x7}, 0x2f) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000009c0)={r0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 07:02:24 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x3, {0x19, 0x8, 0x1, 0x7, 0x0, 0xff}}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x31}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x44000) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{@none}, {@none}, {}, {@none}]}) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x498, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2e, 0x1, 0x0, 0x0, "bcadb1ec5a4327562c2d786d35e8298089d9ac8c54655606f007dc761fdbd8e5a5f28a543bbe203e3e9aadbc4aad7f441c7a3253051c6834621a4cf9474273f6"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xaa202, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x12c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x7f, 0xa8, @random="dfc9b2d0b3743a0642b3e0d6ec525423b7c394d565d00044f38509415c3a76e762bd82c3438e90c794e23f085ff1ce01fada0574b8b93e371588c6619834817c9fbc72ef43f363b2335d44ddc605e79a86e96ce440940cf80e61a28dee1de46a8a5bed8e211fcffaebcca9aa094f1350bc15c0ea1bb575be6442e0"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x12c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, r2, 0x20, 0x4, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x1800) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) (async, rerun: 64) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x7, 0x0, 0x7, 0x1, 'syz0\x00', 0xc0}, 0x5, 0x213, 0x45d, 0x0, 0x1, 0x2, 'syz0\x00', &(0x7f00000000c0)=['/dev/nvram\x00'], 0xb}) (async, rerun: 64) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x0, 0xa8000, {{0x9, 0x4, 0x0, 0x17, 0x24, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x44, 0xf, "a119895044c047a8022edbb6f8"}]}}}}}) (async, rerun: 32) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f00000004c0)={'full', 0x20, 0x0, 0x20, 0x7}, 0x2f) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000009c0)={r0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x60, 0xa8, @random="ef982f0c23521fe80100e62c0ecab0f11fe764627d955120e12ed0530c820f4d3f3957b24fda962a3724b8b03683ab11d242e4d09466c5fcd795fa3c9ccbe970e3827588947717408f27634db0185c0e9cd7dd3d870c113d57afa0cd"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x290040) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x208800, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{@none}, {@none}, {}, {@none}]}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x498, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2e, 0x1, 0x0, 0x0, "bcadb1ec5a4327562c2d786d35e8298089d9ac8c54655606f007dc761fdbd8e5a5f28a543bbe203e3e9aadbc4aad7f441c7a3253051c6834621a4cf9474273f6"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xaa202, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xaa202, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x60, 0xa8, @random="ef982f0c23521fe80100e62c0ecab0f11fe764627d955120e12ed0530c820f4d3f3957b24fda962a3724b8b03683ab11d242e4d09466c5fcd795fa3c9ccbe970e3827588947717408f27634db0185c0e9cd7dd3d870c113d57afa0cd"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x290040) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x208800, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x60, 0xa8, @random="ef982f0c23521fe80100e62c0ecab0f11fe764627d955120e12ed0530c820f4d3f3957b24fda962a3724b8b03683ab11d242e4d09466c5fcd795fa3c9ccbe970e3827588947717408f27634db0185c0e9cd7dd3d870c113d57afa0cd"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x290040) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x208800, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) (async) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x12c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x7f, 0xa8, @random="dfc9b2d0b3743a0642b3e0d6ec525423b7c394d565d00044f38509415c3a76e762bd82c3438e90c794e23f085ff1ce01fada0574b8b93e371588c6619834817c9fbc72ef43f363b2335d44ddc605e79a86e96ce440940cf80e61a28dee1de46a8a5bed8e211fcffaebcca9aa094f1350bc15c0ea1bb575be6442e0"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x12c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, r2, 0x20, 0x4, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x1800) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x7, 0x0, 0x7, 0x1, 'syz0\x00', 0xc0}, 0x5, 0x213, 0x45d, 0x0, 0x1, 0x2, 'syz0\x00', &(0x7f00000000c0)=['/dev/nvram\x00'], 0xb}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x0, 0xa8000, {{0x9, 0x4, 0x0, 0x17, 0x24, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x44, 0xf, "a119895044c047a8022edbb6f8"}]}}}}}) (async) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) write$cgroup_pressure(r0, &(0x7f00000004c0)={'full', 0x20, 0x0, 0x20, 0x7}, 0x2f) (async) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000009c0)={r0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{@none}, {@none}, {}, {@none}]}) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x498, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2e, 0x1, 0x0, 0x0, "bcadb1ec5a4327562c2d786d35e8298089d9ac8c54655606f007dc761fdbd8e5a5f28a543bbe203e3e9aadbc4aad7f441c7a3253051c6834621a4cf9474273f6"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{@none}, {@none}, {}, {@none}]}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x498, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2e, 0x1, 0x0, 0x0, "bcadb1ec5a4327562c2d786d35e8298089d9ac8c54655606f007dc761fdbd8e5a5f28a543bbe203e3e9aadbc4aad7f441c7a3253051c6834621a4cf9474273f6"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x60, 0xa8, @random="ef982f0c23521fe80100e62c0ecab0f11fe764627d955120e12ed0530c820f4d3f3957b24fda962a3724b8b03683ab11d242e4d09466c5fcd795fa3c9ccbe970e3827588947717408f27634db0185c0e9cd7dd3d870c113d57afa0cd"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x290040) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x208800, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xaa202, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xc091) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@private}, {@local}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x167, 0x1, 0xee8, @random="50a30dea6d4b", 'macvlan1\x00'}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x608040, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xc091) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@private}, {@local}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x167, 0x1, 0xee8, @random="50a30dea6d4b", 'macvlan1\x00'}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xc091) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@private}, {@local}]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x167, 0x1, 0xee8, @random="50a30dea6d4b", 'macvlan1\x00'}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4) (async) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x608040, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@loopback}, {@private}, {}]}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xe0a, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0xffe0, 0x5}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2de8b5819d32f640) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@loopback}, {@private}, {}]}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xe0a, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0xffe0, 0x5}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2de8b5819d32f640) (rerun: 64) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xc091) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@private}, {@local}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x167, 0x1, 0xee8, @random="50a30dea6d4b", 'macvlan1\x00'}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0xc091) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x0, 0x0, 0x40, 0x0, [{@remote}, {@multicast2}, {@private}, {@local}]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x167, 0x1, 0xee8, @random="50a30dea6d4b", 'macvlan1\x00'}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4) (async) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xc0, 0x6, 0x4, 0x2000, 0xff, {0x77359400}, {0x2, 0x1, 0x7, 0x5, 0x0, 0x3f, "e242aab9"}, 0x4, 0x4, {}, 0x8, 0x0, r0}) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async, rerun: 64) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xc0, 0x6, 0x4, 0x2000, 0xff, {0x77359400}, {0x2, 0x1, 0x7, 0x5, 0x0, 0x3f, "e242aab9"}, 0x4, 0x4, {}, 0x8, 0x0, r0}) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x608040, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@loopback}, {@private}, {}]}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xe0a, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0xffe0, 0x5}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2de8b5819d32f640) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {@loopback}, {@private}, {}]}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xe0a, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0xffe0, 0x5}, {0xfff2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2de8b5819d32f640) (async) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = socket(0x27, 0x2, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0xb8, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe5a2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4844}, 0x4048800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe1, &(0x7f0000000080)="90f4bbeb3054ba97e56fcb4199451832515c5d6638fb34f7a30a8b6b0df65224b6dc207f716233ae2b53d10ddf1bab495fa75b39b9ed043fb1f3a851d788942f9e9c428096f35d8fd4bf8085ef3f6c159f8488c566ec38ac140be39f96c3c888fbd79a4a1036a7432c35fb5a9a5c41d10c9205e4ac89b778c295b3d422b162c73d6d9f1acaad2bb96b9057cb400059712b94800a717ac527ee585b730858385b2fb4892ffbdbd1138e24449880ba71cebbf7d6d9c620cc8bf5971e112be7f6072024ece9d934d8a30d10371519627a", 0xcf, 0xb, 0x4, 0x5, 0x4, 0x3, &(0x7f00000001c0)="f7d5e31dafadb35690a11e0adf4dc858a33008c118a3dc44b18f275e9656e7db96ebc01bcf11b18699aa7e491b5482d0b9543a5f5a50171b9c4f5438c642b5697e06f878ed117615a55d0a25ddf710603f1917ad6f4b6472ba725fa1a71f5b963e4a9cf5f57376b26c6b2badd6290000000000"}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8009c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000ac1414aa000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff00"/229]}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xc0, 0x6, 0x4, 0x2000, 0xff, {0x77359400}, {0x2, 0x1, 0x7, 0x5, 0x0, 0x3f, "e242aab9"}, 0x4, 0x4, {}, 0x8, 0x0, r0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xc0, 0x6, 0x4, 0x2000, 0xff, {0x77359400}, {0x2, 0x1, 0x7, 0x5, 0x0, 0x3f, "e242aab9"}, 0x4, 0x4, {}, 0x8, 0x0, r0}) (async) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x400000) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) r2 = socket(0x27, 0x2, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0xb8, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe5a2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4844}, 0x4048800) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x1) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080029bd7000fedbdf254d0000000e0001000000000f4002006e657464657673696d3001000000000000000000000d13d59d3ac3ca8e6c53bd8e42fa0582362ae643e1de9f4cffd68771a788a9235ca71b8a77b7c67c270a6db55ff73faf036fe8acf9adf17d25660276303a5c1de047aeb4228eb6efe6441c2444af58913211ce7037d95b88d6d97682a3c8014d6f1da6040408c753086bb6f4d918c2465b4b6fc3f49d8d350ebb7db0f1f48dc2343477ddb358759b000000800318393085169ecf417a162ccd91ef2847714cee406a0ae1891da48d2e3797f48a838526f235501135af274d457d32cb8c72afb5b4e9b1c3a455285635b28ca472a7289d4e1b171601fbc0f0007a536d880d529acdf677eaa6e8f774b4bacf8669c69a9eae3db3825a9b928b3d60c3e35c34e6ffbb7e5cfc7bc81972c6edd960650861b07786891dc5a45290d76a0592ba3a279b6892704dcc3bcc5e3d62ec37a6c848734f54245dc0361227583d4a442aa24f89b798deb11e056d40a58b8e6e5bcde02e8b229b"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe1, &(0x7f0000000080)="90f4bbeb3054ba97e56fcb4199451832515c5d6638fb34f7a30a8b6b0df65224b6dc207f716233ae2b53d10ddf1bab495fa75b39b9ed043fb1f3a851d788942f9e9c428096f35d8fd4bf8085ef3f6c159f8488c566ec38ac140be39f96c3c888fbd79a4a1036a7432c35fb5a9a5c41d10c9205e4ac89b778c295b3d422b162c73d6d9f1acaad2bb96b9057cb400059712b94800a717ac527ee585b730858385b2fb4892ffbdbd1138e24449880ba71cebbf7d6d9c620cc8bf5971e112be7f6072024ece9d934d8a30d10371519627a", 0xcf, 0xb, 0x4, 0x5, 0x4, 0x3, &(0x7f00000001c0)="f7d5e31dafadb35690a11e0adf4dc858a33008c118a3dc44b18f275e9656e7db96ebc01bcf11b18699aa7e491b5482d0b9543a5f5a50171b9c4f5438c642b5697e06f878ed117615a55d0a25ddf710603f1917ad6f4b6472ba725fa1a71f5b963e4a9cf5f57376b26c6b2badd6290000000000"}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe1, &(0x7f0000000080)="90f4bbeb3054ba97e56fcb4199451832515c5d6638fb34f7a30a8b6b0df65224b6dc207f716233ae2b53d10ddf1bab495fa75b39b9ed043fb1f3a851d788942f9e9c428096f35d8fd4bf8085ef3f6c159f8488c566ec38ac140be39f96c3c888fbd79a4a1036a7432c35fb5a9a5c41d10c9205e4ac89b778c295b3d422b162c73d6d9f1acaad2bb96b9057cb400059712b94800a717ac527ee585b730858385b2fb4892ffbdbd1138e24449880ba71cebbf7d6d9c620cc8bf5971e112be7f6072024ece9d934d8a30d10371519627a", 0xcf, 0xb, 0x4, 0x5, 0x4, 0x3, &(0x7f00000001c0)="f7d5e31dafadb35690a11e0adf4dc858a33008c118a3dc44b18f275e9656e7db96ebc01bcf11b18699aa7e491b5482d0b9543a5f5a50171b9c4f5438c642b5697e06f878ed117615a55d0a25ddf710603f1917ad6f4b6472ba725fa1a71f5b963e4a9cf5f57376b26c6b2badd6290000000000"}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) (async) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x400000) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8009c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000ac1414aa000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff00"/229]}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x800) 07:02:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = socket(0x27, 0x2, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0xb8, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe5a2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4844}, 0x4048800) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x1) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe1, &(0x7f0000000080)="90f4bbeb3054ba97e56fcb4199451832515c5d6638fb34f7a30a8b6b0df65224b6dc207f716233ae2b53d10ddf1bab495fa75b39b9ed043fb1f3a851d788942f9e9c428096f35d8fd4bf8085ef3f6c159f8488c566ec38ac140be39f96c3c888fbd79a4a1036a7432c35fb5a9a5c41d10c9205e4ac89b778c295b3d422b162c73d6d9f1acaad2bb96b9057cb400059712b94800a717ac527ee585b730858385b2fb4892ffbdbd1138e24449880ba71cebbf7d6d9c620cc8bf5971e112be7f6072024ece9d934d8a30d10371519627a", 0xcf, 0xb, 0x4, 0x5, 0x4, 0x3, &(0x7f00000001c0)="f7d5e31dafadb35690a11e0adf4dc858a33008c118a3dc44b18f275e9656e7db96ebc01bcf11b18699aa7e491b5482d0b9543a5f5a50171b9c4f5438c642b5697e06f878ed117615a55d0a25ddf710603f1917ad6f4b6472ba725fa1a71f5b963e4a9cf5f57376b26c6b2badd6290000000000"}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x8}, 0x4, 0xe1, &(0x7f0000000080)="90f4bbeb3054ba97e56fcb4199451832515c5d6638fb34f7a30a8b6b0df65224b6dc207f716233ae2b53d10ddf1bab495fa75b39b9ed043fb1f3a851d788942f9e9c428096f35d8fd4bf8085ef3f6c159f8488c566ec38ac140be39f96c3c888fbd79a4a1036a7432c35fb5a9a5c41d10c9205e4ac89b778c295b3d422b162c73d6d9f1acaad2bb96b9057cb400059712b94800a717ac527ee585b730858385b2fb4892ffbdbd1138e24449880ba71cebbf7d6d9c620cc8bf5971e112be7f6072024ece9d934d8a30d10371519627a", 0xcf, 0xb, 0x4, 0x5, 0x4, 0x3, &(0x7f00000001c0)="f7d5e31dafadb35690a11e0adf4dc858a33008c118a3dc44b18f275e9656e7db96ebc01bcf11b18699aa7e491b5482d0b9543a5f5a50171b9c4f5438c642b5697e06f878ed117615a55d0a25ddf710603f1917ad6f4b6472ba725fa1a71f5b963e4a9cf5f57376b26c6b2badd6290000000000"}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) (async) 07:02:24 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x400000) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 07:02:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x800) (async) 07:02:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8009c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000ac1414aa000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ffffffff00"/229]}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xbea28e1d0a00c5c9, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x0, 0x20, 0x9}, 0x2f) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x8) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="65727370616e30000000000000000000cb08ca7332214e9bdbeec640d4748f17feded115745fa1292c4aa0ea66c7cdbb81c4bf398031137f412450f804b29dcf0f207affa25f34ffd57257007663c07f92017dda32d4e6e3e43dcc701486439cb205002733a658c2ec606d7f8d56664a718f00000000e6acac0736cdb15476131b5571573ee3714e4cadc893034ca41242226e8fe8772899407ed0a385f80ddbc3c96babe726ed299166fd44c8650d62c45ac6e069fcd9dd79cf00"/225, @ANYRES32=r4, @ANYBLOB="0040000100000003000010004655001800660000012f9078ac1414bbac1414aa00010000"]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@private=0xa010102, 0x1, 0x0, 0x90, 0x0, [{@loopback}, {@remote}, {}, {@initdev}, {@remote}, {@private}, {@loopback}, {@local}, {@empty}]}}) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x2, 0x240, 0xfffffff8, 0xe, r0, 0x1ff, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) r6 = accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) bind$phonet(r6, &(0x7f00000001c0)={0x23, 0xe, 0x9, 0xe2}, 0x10) 07:02:24 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000080)={0x2c5, 0x0, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x109100) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x13, 0x0, 0x8, 0x2e, 0x2, &(0x7f0000000140)="066cbf55f7c9414fca81befa7b69431cc889ab4848b2af5d4289389c006bb5c400edacfa29df082fcd32965729ac"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x64700) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffb, 0x800) 07:02:25 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000080)={0x2c5, 0x0, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x109100) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x13, 0x0, 0x8, 0x2e, 0x2, &(0x7f0000000140)="066cbf55f7c9414fca81befa7b69431cc889ab4848b2af5d4289389c006bb5c400edacfa29df082fcd32965729ac"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000080)={0x2c5, 0x0, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x109100) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x13, 0x0, 0x8, 0x2e, 0x2, &(0x7f0000000140)="066cbf55f7c9414fca81befa7b69431cc889ab4848b2af5d4289389c006bb5c400edacfa29df082fcd32965729ac"}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) (async) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) recvfrom$phonet(r1, &(0x7f0000000240)=""/199, 0xc7, 0x20, 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010102, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@initdev}]}}) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x80100) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x0) close$fd_v4l2_buffer(r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) 07:02:25 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x60480, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) r1 = socket(0xb, 0xa, 0x1000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r2) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, 0x0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x64700) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) recvfrom$phonet(r1, &(0x7f0000000240)=""/199, 0xc7, 0x20, 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010102, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@initdev}]}}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x80100) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x0) close$fd_v4l2_buffer(r0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) 07:02:25 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000080)={0x2c5, 0x0, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x109100) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x13, 0x0, 0x8, 0x2e, 0x2, &(0x7f0000000140)="066cbf55f7c9414fca81befa7b69431cc889ab4848b2af5d4289389c006bb5c400edacfa29df082fcd32965729ac"}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1) (async, rerun: 32) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) 07:02:25 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x60480, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) r1 = socket(0xb, 0xa, 0x1000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 32) close$fd_v4l2_buffer(r2) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, 0x0) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xbea28e1d0a00c5c9, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x0, 0x20, 0x9}, 0x2f) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x8) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="65727370616e30000000000000000000cb08ca7332214e9bdbeec640d4748f17feded115745fa1292c4aa0ea66c7cdbb81c4bf398031137f412450f804b29dcf0f207affa25f34ffd57257007663c07f92017dda32d4e6e3e43dcc701486439cb205002733a658c2ec606d7f8d56664a718f00000000e6acac0736cdb15476131b5571573ee3714e4cadc893034ca41242226e8fe8772899407ed0a385f80ddbc3c96babe726ed299166fd44c8650d62c45ac6e069fcd9dd79cf00"/225, @ANYRES32=r4, @ANYBLOB="0040000100000003000010004655001800660000012f9078ac1414bbac1414aa00010000"]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@private=0xa010102, 0x1, 0x0, 0x90, 0x0, [{@loopback}, {@remote}, {}, {@initdev}, {@remote}, {@private}, {@loopback}, {@local}, {@empty}]}}) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x2, 0x240, 0xfffffff8, 0xe, r0, 0x1ff, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) r6 = accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) bind$phonet(r6, &(0x7f00000001c0)={0x23, 0xe, 0x9, 0xe2}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xbea28e1d0a00c5c9, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x0, 0x20, 0x9}, 0x2f) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x8) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="65727370616e30000000000000000000cb08ca7332214e9bdbeec640d4748f17feded115745fa1292c4aa0ea66c7cdbb81c4bf398031137f412450f804b29dcf0f207affa25f34ffd57257007663c07f92017dda32d4e6e3e43dcc701486439cb205002733a658c2ec606d7f8d56664a718f00000000e6acac0736cdb15476131b5571573ee3714e4cadc893034ca41242226e8fe8772899407ed0a385f80ddbc3c96babe726ed299166fd44c8650d62c45ac6e069fcd9dd79cf00"/225, @ANYRES32=r4, @ANYBLOB="0040000100000003000010004655001800660000012f9078ac1414bbac1414aa00010000"]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@private=0xa010102, 0x1, 0x0, 0x90, 0x0, [{@loopback}, {@remote}, {}, {@initdev}, {@remote}, {@private}, {@loopback}, {@local}, {@empty}]}}) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x2, 0x240, 0xfffffff8, 0xe, r0, 0x1ff, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) (async) accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) bind$phonet(r6, &(0x7f00000001c0)={0x23, 0xe, 0x9, 0xe2}, 0x10) (async) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x64700) 07:02:25 executing program 4: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111280, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) recvfrom$phonet(r1, &(0x7f0000000240)=""/199, 0xc7, 0x20, 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010102, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@initdev}]}}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x80100) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x0) (async) close$fd_v4l2_buffer(r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 07:02:25 executing program 4: close$fd_v4l2_buffer(0xffffffffffffffff) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111280, 0x0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) 07:02:25 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x60480, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) r1 = socket(0xb, 0xa, 0x1000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r2) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x60480, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) (async) socket(0xb, 0xa, 0x1000) (async) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r2) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, 0x0) (async) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xbea28e1d0a00c5c9, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x0, 0x20, 0x9}, 0x2f) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x8) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="65727370616e30000000000000000000cb08ca7332214e9bdbeec640d4748f17feded115745fa1292c4aa0ea66c7cdbb81c4bf398031137f412450f804b29dcf0f207affa25f34ffd57257007663c07f92017dda32d4e6e3e43dcc701486439cb205002733a658c2ec606d7f8d56664a718f00000000e6acac0736cdb15476131b5571573ee3714e4cadc893034ca41242226e8fe8772899407ed0a385f80ddbc3c96babe726ed299166fd44c8650d62c45ac6e069fcd9dd79cf00"/225, @ANYRES32=r4, @ANYBLOB="0040000100000003000010004655001800660000012f9078ac1414bbac1414aa00010000"]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@private=0xa010102, 0x1, 0x0, 0x90, 0x0, [{@loopback}, {@remote}, {}, {@initdev}, {@remote}, {@private}, {@loopback}, {@local}, {@empty}]}}) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x2, 0x240, 0xfffffff8, 0xe, r0, 0x1ff, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) (async) r6 = accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) bind$phonet(r6, &(0x7f00000001c0)={0x23, 0xe, 0x9, 0xe2}, 0x10) 07:02:25 executing program 4: close$fd_v4l2_buffer(0xffffffffffffffff) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (rerun: 64) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x111280, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_DEV_DESTROY(r1, 0x5502) close$fd_v4l2_buffer(r0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2040c0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2040c0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2040c0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000, 0x800) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000180)=""/12) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000140)) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90140, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_DEV_DESTROY(r1, 0x5502) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$UI_DEV_DESTROY(r1, 0x5502) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90140, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90140, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@empty, @private=0xa010102, 0x11, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000b840e452a4e0354ef0af82d5f00bf0af2ee5b68de89508bf93371d7e254095007f18b9fc5a9bec1e2898645855e9d5699204a1db010f5009723081d00d399b8006c89ea18a6113f7c144d616ed1891a307223330584fb591a4e23e171d3bf390c249986267c530adce5fd4f5b335aab066e01bb764f4a8495d0813acd907a435da", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf25060000000800110001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r6, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc0000000}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x800}}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc00}, 0x20000810) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) r8 = getpgid(0x0) syz_open_procfs$namespace(r8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000980)={{0x4, 0x2, 0x8001, 0x5, 'syz1\x00', 0x2}, 0x5, 0x10000265, 0x9, r8, 0x5, 0x7, 'syz0\x00', &(0x7f0000000840)=['\x00', '\'\x00', 'netdevsim', '/^$]}:I}.%\x00', 'netdevsim\x00'], 0x21}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r11, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9004009}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x12c, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="830782e93e3eb5b8573201ac208398fa8360bc75fc1c6e324244f4a4d2af6f1305ad72966640ade208ca65b104b8b8db6d315bba64ac74e22d440df9ca89c99188c937fa9345e57ebf02467b5ce4acf4979ec45d88597777d708d52eeb9ab34ebce4a789babb0c627959c3c7857a8399ef4eb16084140b867399900b60e771ea34fca822d9996a404f53ebc6033a19ba7314f6b12b7582f7aa3bf5e00c8cfed00cadd5333c9dccfe613436fe858bd63816e6"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8002}, 0x810) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000880)=""/13) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) 07:02:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000, 0x800) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000180)=""/12) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000140)) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_DEV_DESTROY(r1, 0x5502) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$UI_DEV_DESTROY(r1, 0x5502) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2040c0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (rerun: 32) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@empty, @private=0xa010102, 0x11, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000b840e452a4e0354ef0af82d5f00bf0af2ee5b68de89508bf93371d7e254095007f18b9fc5a9bec1e2898645855e9d5699204a1db010f5009723081d00d399b8006c89ea18a6113f7c144d616ed1891a307223330584fb591a4e23e171d3bf390c249986267c530adce5fd4f5b335aab066e01bb764f4a8495d0813acd907a435da", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf25060000000800110001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r6, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc0000000}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x800}}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc00}, 0x20000810) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) r8 = getpgid(0x0) syz_open_procfs$namespace(r8, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000980)={{0x4, 0x2, 0x8001, 0x5, 'syz1\x00', 0x2}, 0x5, 0x10000265, 0x9, r8, 0x5, 0x7, 'syz0\x00', &(0x7f0000000840)=['\x00', '\'\x00', 'netdevsim', '/^$]}:I}.%\x00', 'netdevsim\x00'], 0x21}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r11, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9004009}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x12c, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="830782e93e3eb5b8573201ac208398fa8360bc75fc1c6e324244f4a4d2af6f1305ad72966640ade208ca65b104b8b8db6d315bba64ac74e22d440df9ca89c99188c937fa9345e57ebf02467b5ce4acf4979ec45d88597777d708d52eeb9ab34ebce4a789babb0c627959c3c7857a8399ef4eb16084140b867399900b60e771ea34fca822d9996a404f53ebc6033a19ba7314f6b12b7582f7aa3bf5e00c8cfed00cadd5333c9dccfe613436fe858bd63816e6"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8002}, 0x810) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000880)=""/13) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90140, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90140, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000, 0x800) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (rerun: 32) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000180)=""/12) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000140)) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000190000022cbd7000fddbdf251c000005ff03fd050008000005001a000900000006000000000000000000000000000c00000002000f0f00004dd49a00000000000000002a62b93f3b5169000000de0000000000000000000000000000080000000000000000000000000000000d00000000000000000000000f0000000000000000000000000000000200000408000000000000000000000000001400120011004a84d35100"/179], 0x11b}, 0x1, 0x0, 0x0, 0x4004}, 0x200008d0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200)="02f8b59cf25f63e7fa73e60adb5000effe808325b1440aa019b108788b760fa7d572b87f7b9fcfe208f57e18fc7de439d1f860ede6680a23c432aa477081900a9d73789df73402c56bc28163bcf44e5d6c96d8cebc776ad2aa3da92aac8cfb546274d1b139357aa5630163312c29125e8e38b593fa620faf96d5fc672e6637a51b0cdafdad68ee88ffdeb650e2ef205e86c15f492aee400d2216b91b19684211e7796e8c07c9348998db0f68a3b1836e440aea2070a2c431e01922d2d05e6b48211b5fce5dee51ac0a6eecfa49a5a9a9c83bed6316da4c80a1df0f7f54c71780346378f5ab468e8e", &(0x7f0000000080)=@tcp=r1, 0x2}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendto$phonet(r2, &(0x7f0000000400)="43fd0ec798107aa9771656a7699cc448b2dd01b2f3fd02d5c6dccf84e90caae0f827d782301b9ec1eb4f9e4960c15d8d6a11d3fc5c17c27e24be5c7092bb4cf3808bc48fd05115e1ad3815be89a9324ab20954e61b7636a8539febf1369b217ef0aeda62304f4eac821a4f047148d83f23c9da6257b1782e7da37b18c7e5f86062b1029691d46beb8671cc67a280d219ba0221c300ed600dd0c2a7a5bb59a7af391226142db25c71fa3063f36725389c1771398743c88deb46c746e2fc05653b382a5f44fffbd038c6e94ad35a7e7ff6b79a2eb26ce784e943", 0xd9, 0x24080044, &(0x7f00000000c0)={0x23, 0x3, 0x1}, 0x10) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={@empty, @private=0xa010102, 0x11, 0x6}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000b840e452a4e0354ef0af82d5f00bf0af2ee5b68de89508bf93371d7e254095007f18b9fc5a9bec1e2898645855e9d5699204a1db010f5009723081d00d399b8006c89ea18a6113f7c144d616ed1891a307223330584fb591a4e23e171d3bf390c249986267c530adce5fd4f5b335aab066e01bb764f4a8495d0813acd907a435da", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf25060000000800110001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r6, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc0000000}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x800}}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc00}, 0x20000810) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) (async) r8 = getpgid(0x0) syz_open_procfs$namespace(r8, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000980)={{0x4, 0x2, 0x8001, 0x5, 'syz1\x00', 0x2}, 0x5, 0x10000265, 0x9, r8, 0x5, 0x7, 'syz0\x00', &(0x7f0000000840)=['\x00', '\'\x00', 'netdevsim', '/^$]}:I}.%\x00', 'netdevsim\x00'], 0x21}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r11, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9004009}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x12c, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="830782e93e3eb5b8573201ac208398fa8360bc75fc1c6e324244f4a4d2af6f1305ad72966640ade208ca65b104b8b8db6d315bba64ac74e22d440df9ca89c99188c937fa9345e57ebf02467b5ce4acf4979ec45d88597777d708d52eeb9ab34ebce4a789babb0c627959c3c7857a8399ef4eb16084140b867399900b60e771ea34fca822d9996a404f53ebc6033a19ba7314f6b12b7582f7aa3bf5e00c8cfed00cadd5333c9dccfe613436fe858bd63816e6"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8002}, 0x810) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000880)=""/13) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000190000022cbd7000fddbdf251c000005ff03fd050008000005001a000900000006000000000000000000000000000c00000002000f0f00004dd49a00000000000000002a62b93f3b5169000000de0000000000000000000000000000080000000000000000000000000000000d00000000000000000000000f0000000000000000000000000000000200000408000000000000000000000000001400120011004a84d35100"/179], 0x11b}, 0x1, 0x0, 0x0, 0x4004}, 0x200008d0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200)="02f8b59cf25f63e7fa73e60adb5000effe808325b1440aa019b108788b760fa7d572b87f7b9fcfe208f57e18fc7de439d1f860ede6680a23c432aa477081900a9d73789df73402c56bc28163bcf44e5d6c96d8cebc776ad2aa3da92aac8cfb546274d1b139357aa5630163312c29125e8e38b593fa620faf96d5fc672e6637a51b0cdafdad68ee88ffdeb650e2ef205e86c15f492aee400d2216b91b19684211e7796e8c07c9348998db0f68a3b1836e440aea2070a2c431e01922d2d05e6b48211b5fce5dee51ac0a6eecfa49a5a9a9c83bed6316da4c80a1df0f7f54c71780346378f5ab468e8e", &(0x7f0000000080)=@tcp=r1, 0x2}, 0x20) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendto$phonet(r2, &(0x7f0000000400)="43fd0ec798107aa9771656a7699cc448b2dd01b2f3fd02d5c6dccf84e90caae0f827d782301b9ec1eb4f9e4960c15d8d6a11d3fc5c17c27e24be5c7092bb4cf3808bc48fd05115e1ad3815be89a9324ab20954e61b7636a8539febf1369b217ef0aeda62304f4eac821a4f047148d83f23c9da6257b1782e7da37b18c7e5f86062b1029691d46beb8671cc67a280d219ba0221c300ed600dd0c2a7a5bb59a7af391226142db25c71fa3063f36725389c1771398743c88deb46c746e2fc05653b382a5f44fffbd038c6e94ad35a7e7ff6b79a2eb26ce784e943", 0xd9, 0x24080044, &(0x7f00000000c0)={0x23, 0x3, 0x1}, 0x10) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) (async) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000190000022cbd7000fddbdf251c000005ff03fd050008000005001a000900000006000000000000000000000000000c00000002000f0f00004dd49a00000000000000002a62b93f3b5169000000de0000000000000000000000000000080000000000000000000000000000000d00000000000000000000000f0000000000000000000000000000000200000408000000000000000000000000001400120011004a84d35100"/179], 0x11b}, 0x1, 0x0, 0x0, 0x4004}, 0x200008d0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200)="02f8b59cf25f63e7fa73e60adb5000effe808325b1440aa019b108788b760fa7d572b87f7b9fcfe208f57e18fc7de439d1f860ede6680a23c432aa477081900a9d73789df73402c56bc28163bcf44e5d6c96d8cebc776ad2aa3da92aac8cfb546274d1b139357aa5630163312c29125e8e38b593fa620faf96d5fc672e6637a51b0cdafdad68ee88ffdeb650e2ef205e86c15f492aee400d2216b91b19684211e7796e8c07c9348998db0f68a3b1836e440aea2070a2c431e01922d2d05e6b48211b5fce5dee51ac0a6eecfa49a5a9a9c83bed6316da4c80a1df0f7f54c71780346378f5ab468e8e", &(0x7f0000000080)=@tcp=r1, 0x2}, 0x20) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendto$phonet(r2, &(0x7f0000000400)="43fd0ec798107aa9771656a7699cc448b2dd01b2f3fd02d5c6dccf84e90caae0f827d782301b9ec1eb4f9e4960c15d8d6a11d3fc5c17c27e24be5c7092bb4cf3808bc48fd05115e1ad3815be89a9324ab20954e61b7636a8539febf1369b217ef0aeda62304f4eac821a4f047148d83f23c9da6257b1782e7da37b18c7e5f86062b1029691d46beb8671cc67a280d219ba0221c300ed600dd0c2a7a5bb59a7af391226142db25c71fa3063f36725389c1771398743c88deb46c746e2fc05653b382a5f44fffbd038c6e94ad35a7e7ff6b79a2eb26ce784e943", 0xd9, 0x24080044, &(0x7f00000000c0)={0x23, 0x3, 0x1}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (rerun: 64) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) (async) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0xfffffff8) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x4]}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc6db, 0x42002) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1, 0x1, &(0x7f0000000080)="80d555f0982b3a918b9928ce017841c366151e", 0x13, 0x200, 0x63b4, 0x7b, 0x8, 0x9, &(0x7f00000000c0)="599fd634937148f58d3cf3c4d821f4eb36505d449e21e233e5f63861cfcad3fdf41109df3dff3121d86aeebe6a1e0990146f846bbace1b22139fa2cfb1563c97cc18e4c10db7c2b9d4aee9a9aec54243e04860a0bd9109f2002613e68499", [{0xffffffb4, 0x9, 0x100}, {0x0, 0x101, 0x68}, {0x0, 0x3, 0x1}, {0x1, 0x4, 0x39f}, {0x1, 0x3, 0x81}, {0xf8, 0x9, 0xbc4}, {0x83, 0x4}, {0x4, 0x7, 0x3}, {0x7f, 0xf57, 0x401}, {0x6, 0x5}, {0x80000001, 0x2, 0x4}, {0x2, 0x6, 0x7}, {0xff, 0x7a, 0x8}, {0x10000, 0x3167, 0xf9e8}, {0x10001, 0x40, 0x7}, {0x2b, 0x3f, 0x4}, {0x41138c2b, 0x493, 0x1}, {0x3ff, 0x9, 0xdd50}, {0xfc2, 0x40, 0x9}, {0x2, 0x6, 0x400}, {0x1, 0x8, 0x38a}, {0x3, 0x6, 0x4}, {0x0, 0x3, 0x89}, {0x5, 0x100, 0x5}, {0x401, 0xaa6, 0x1}, {0x6, 0x0, 0x4}, {0x5, 0x6, 0x6}, {0xffff, 0x1, 0x6}, {0xff, 0x1, 0x6}, {0x31db, 0x1, 0x6}, {0x1, 0x101}, {0x100, 0x6, 0x6}, {0x9, 0x2, 0x4}, {0x3, 0x81, 0x4}, {0x3f, 0x7f, 0x3}, {0x6, 0x2, 0x3}, {0x4, 0x2, 0x9}, {0x2, 0x1, 0x842}, {0xad76, 0x0, 0xeb96}, {0xfffffffb, 0x4, 0x1ff}, {0x2, 0x48}, {0x1000, 0x6, 0x80000001}, {0xb3, 0xd912, 0x9}, {0x4, 0x8, 0x6}, {0xffff, 0xfffffe01, 0x5}, {0x1, 0x9}, {0xffff, 0x921d, 0x1}, {0x9, 0x6, 0x80000001}, {0x6d, 0x8, 0x8}, {0x4, 0x7fffffff, 0xfff}, {0x5, 0x7, 0x5}, {0x5a40, 0x7f, 0x3}, {0x0, 0xffffffff, 0x9}, {0xaaf, 0x80000001, 0x1000}, {0x1ff, 0x23, 0x10001}, {0x5, 0x1, 0x4}, {0x0, 0x8, 0x2}, {0x1ff, 0xfffffff9, 0x4}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1000}, {0x0, 0x6, 0x7f}, {0x6, 0x80, 0x6}, {0xdb, 0x0, 0x5}, {0x7f, 0x6, 0x2}, {0x400, 0xfffffffb, 0x8}, {0x4, 0x5, 0x2c1}, {0x5, 0x9, 0xb52e}, {0x401, 0x8, 0x7b}, {0x8, 0xfffffff7, 0x6}, {0x6, 0x20, 0x9}, {0x2, 0x8, 0x4}, {0x7fffffff, 0x8, 0x80}, {0x80, 0x8000, 0x1ff}, {0x40, 0x8, 0x3f}, {0x90, 0x400, 0xb}, {0xd1, 0x81, 0x7}, {0x9, 0x21, 0x1000}, {0x6, 0x40, 0x8}, {0xe1c, 0x1, 0x7}, {0x5, 0x8, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x8001, 0x5}, {0x2, 0xffffffff, 0x3}, {0x0, 0x3f, 0x98ca}, {0x5, 0x638e, 0x1}, {0x1ff, 0x8, 0x3d4e}, {0x1, 0x17b0, 0x1}, {0x0, 0x40, 0x7}, {0x9, 0xfffffffd, 0x200}, {0x0, 0x1, 0x5}, {0x34e, 0x10001, 0xdec5}, {0x2, 0x6, 0x3}, {0x8, 0x7fff, 0xff}, {0x3, 0xdb3d, 0x6}, {0xd07, 0x0, 0x4}, {0x3, 0x5, 0x24f}, {0x0, 0xb65, 0x3}, {0x7, 0xfe, 0x3}, {0x7, 0x76308bbe, 0x5}, {0x3, 0x422}, {0x0, 0x7, 0x8000}, {0x6, 0x3, 0xfff}, {0x1, 0x2, 0x100}, {0x6, 0x8, 0x7}, {0x0, 0x3, 0x4}, {0x7, 0x94, 0x40}, {0x3, 0x7, 0x3}, {0x8, 0xffff4fc0, 0x6}, {0x9, 0x0, 0xef}, {0xfffffffe, 0x5, 0x800}, {0x16, 0x6, 0x5}, {0x5e8, 0x759e6b8c, 0x8}, {0x3, 0xffffffff, 0x196}, {0xff, 0x7, 0x3}, {0xff, 0x3, 0x5}, {0xa1, 0x6, 0x7}, {0x0, 0x10000, 0x6}, {0x8d8, 0xffffffb5, 0x5}, {0x3, 0x9, 0x6}, {0x0, 0x7fffffff, 0x8}, {0x4, 0xdc, 0x2}, {0x1, 0xffffffff, 0x4}, {0x5, 0x9, 0x401}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x4]}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x4]}) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x100, 0xc, [0x20, 0x1, 0x401]}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc6db, 0x42002) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1, 0x1, &(0x7f0000000080)="80d555f0982b3a918b9928ce017841c366151e", 0x13, 0x200, 0x63b4, 0x7b, 0x8, 0x9, &(0x7f00000000c0)="599fd634937148f58d3cf3c4d821f4eb36505d449e21e233e5f63861cfcad3fdf41109df3dff3121d86aeebe6a1e0990146f846bbace1b22139fa2cfb1563c97cc18e4c10db7c2b9d4aee9a9aec54243e04860a0bd9109f2002613e68499", [{0xffffffb4, 0x9, 0x100}, {0x0, 0x101, 0x68}, {0x0, 0x3, 0x1}, {0x1, 0x4, 0x39f}, {0x1, 0x3, 0x81}, {0xf8, 0x9, 0xbc4}, {0x83, 0x4}, {0x4, 0x7, 0x3}, {0x7f, 0xf57, 0x401}, {0x6, 0x5}, {0x80000001, 0x2, 0x4}, {0x2, 0x6, 0x7}, {0xff, 0x7a, 0x8}, {0x10000, 0x3167, 0xf9e8}, {0x10001, 0x40, 0x7}, {0x2b, 0x3f, 0x4}, {0x41138c2b, 0x493, 0x1}, {0x3ff, 0x9, 0xdd50}, {0xfc2, 0x40, 0x9}, {0x2, 0x6, 0x400}, {0x1, 0x8, 0x38a}, {0x3, 0x6, 0x4}, {0x0, 0x3, 0x89}, {0x5, 0x100, 0x5}, {0x401, 0xaa6, 0x1}, {0x6, 0x0, 0x4}, {0x5, 0x6, 0x6}, {0xffff, 0x1, 0x6}, {0xff, 0x1, 0x6}, {0x31db, 0x1, 0x6}, {0x1, 0x101}, {0x100, 0x6, 0x6}, {0x9, 0x2, 0x4}, {0x3, 0x81, 0x4}, {0x3f, 0x7f, 0x3}, {0x6, 0x2, 0x3}, {0x4, 0x2, 0x9}, {0x2, 0x1, 0x842}, {0xad76, 0x0, 0xeb96}, {0xfffffffb, 0x4, 0x1ff}, {0x2, 0x48}, {0x1000, 0x6, 0x80000001}, {0xb3, 0xd912, 0x9}, {0x4, 0x8, 0x6}, {0xffff, 0xfffffe01, 0x5}, {0x1, 0x9}, {0xffff, 0x921d, 0x1}, {0x9, 0x6, 0x80000001}, {0x6d, 0x8, 0x8}, {0x4, 0x7fffffff, 0xfff}, {0x5, 0x7, 0x5}, {0x5a40, 0x7f, 0x3}, {0x0, 0xffffffff, 0x9}, {0xaaf, 0x80000001, 0x1000}, {0x1ff, 0x23, 0x10001}, {0x5, 0x1, 0x4}, {0x0, 0x8, 0x2}, {0x1ff, 0xfffffff9, 0x4}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1000}, {0x0, 0x6, 0x7f}, {0x6, 0x80, 0x6}, {0xdb, 0x0, 0x5}, {0x7f, 0x6, 0x2}, {0x400, 0xfffffffb, 0x8}, {0x4, 0x5, 0x2c1}, {0x5, 0x9, 0xb52e}, {0x401, 0x8, 0x7b}, {0x8, 0xfffffff7, 0x6}, {0x6, 0x20, 0x9}, {0x2, 0x8, 0x4}, {0x7fffffff, 0x8, 0x80}, {0x80, 0x8000, 0x1ff}, {0x40, 0x8, 0x3f}, {0x90, 0x400, 0xb}, {0xd1, 0x81, 0x7}, {0x9, 0x21, 0x1000}, {0x6, 0x40, 0x8}, {0xe1c, 0x1, 0x7}, {0x5, 0x8, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x8001, 0x5}, {0x2, 0xffffffff, 0x3}, {0x0, 0x3f, 0x98ca}, {0x5, 0x638e, 0x1}, {0x1ff, 0x8, 0x3d4e}, {0x1, 0x17b0, 0x1}, {0x0, 0x40, 0x7}, {0x9, 0xfffffffd, 0x200}, {0x0, 0x1, 0x5}, {0x34e, 0x10001, 0xdec5}, {0x2, 0x6, 0x3}, {0x8, 0x7fff, 0xff}, {0x3, 0xdb3d, 0x6}, {0xd07, 0x0, 0x4}, {0x3, 0x5, 0x24f}, {0x0, 0xb65, 0x3}, {0x7, 0xfe, 0x3}, {0x7, 0x76308bbe, 0x5}, {0x3, 0x422}, {0x0, 0x7, 0x8000}, {0x6, 0x3, 0xfff}, {0x1, 0x2, 0x100}, {0x6, 0x8, 0x7}, {0x0, 0x3, 0x4}, {0x7, 0x94, 0x40}, {0x3, 0x7, 0x3}, {0x8, 0xffff4fc0, 0x6}, {0x9, 0x0, 0xef}, {0xfffffffe, 0x5, 0x800}, {0x16, 0x6, 0x5}, {0x5e8, 0x759e6b8c, 0x8}, {0x3, 0xffffffff, 0x196}, {0xff, 0x7, 0x3}, {0xff, 0x3, 0x5}, {0xa1, 0x6, 0x7}, {0x0, 0x10000, 0x6}, {0x8d8, 0xffffffb5, 0x5}, {0x3, 0x9, 0x6}, {0x0, 0x7fffffff, 0x8}, {0x4, 0xdc, 0x2}, {0x1, 0xffffffff, 0x4}, {0x5, 0x9, 0x401}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xc6db, 0x42002) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1, 0x1, &(0x7f0000000080)="80d555f0982b3a918b9928ce017841c366151e", 0x13, 0x200, 0x63b4, 0x7b, 0x8, 0x9, &(0x7f00000000c0)="599fd634937148f58d3cf3c4d821f4eb36505d449e21e233e5f63861cfcad3fdf41109df3dff3121d86aeebe6a1e0990146f846bbace1b22139fa2cfb1563c97cc18e4c10db7c2b9d4aee9a9aec54243e04860a0bd9109f2002613e68499", [{0xffffffb4, 0x9, 0x100}, {0x0, 0x101, 0x68}, {0x0, 0x3, 0x1}, {0x1, 0x4, 0x39f}, {0x1, 0x3, 0x81}, {0xf8, 0x9, 0xbc4}, {0x83, 0x4}, {0x4, 0x7, 0x3}, {0x7f, 0xf57, 0x401}, {0x6, 0x5}, {0x80000001, 0x2, 0x4}, {0x2, 0x6, 0x7}, {0xff, 0x7a, 0x8}, {0x10000, 0x3167, 0xf9e8}, {0x10001, 0x40, 0x7}, {0x2b, 0x3f, 0x4}, {0x41138c2b, 0x493, 0x1}, {0x3ff, 0x9, 0xdd50}, {0xfc2, 0x40, 0x9}, {0x2, 0x6, 0x400}, {0x1, 0x8, 0x38a}, {0x3, 0x6, 0x4}, {0x0, 0x3, 0x89}, {0x5, 0x100, 0x5}, {0x401, 0xaa6, 0x1}, {0x6, 0x0, 0x4}, {0x5, 0x6, 0x6}, {0xffff, 0x1, 0x6}, {0xff, 0x1, 0x6}, {0x31db, 0x1, 0x6}, {0x1, 0x101}, {0x100, 0x6, 0x6}, {0x9, 0x2, 0x4}, {0x3, 0x81, 0x4}, {0x3f, 0x7f, 0x3}, {0x6, 0x2, 0x3}, {0x4, 0x2, 0x9}, {0x2, 0x1, 0x842}, {0xad76, 0x0, 0xeb96}, {0xfffffffb, 0x4, 0x1ff}, {0x2, 0x48}, {0x1000, 0x6, 0x80000001}, {0xb3, 0xd912, 0x9}, {0x4, 0x8, 0x6}, {0xffff, 0xfffffe01, 0x5}, {0x1, 0x9}, {0xffff, 0x921d, 0x1}, {0x9, 0x6, 0x80000001}, {0x6d, 0x8, 0x8}, {0x4, 0x7fffffff, 0xfff}, {0x5, 0x7, 0x5}, {0x5a40, 0x7f, 0x3}, {0x0, 0xffffffff, 0x9}, {0xaaf, 0x80000001, 0x1000}, {0x1ff, 0x23, 0x10001}, {0x5, 0x1, 0x4}, {0x0, 0x8, 0x2}, {0x1ff, 0xfffffff9, 0x4}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1000}, {0x0, 0x6, 0x7f}, {0x6, 0x80, 0x6}, {0xdb, 0x0, 0x5}, {0x7f, 0x6, 0x2}, {0x400, 0xfffffffb, 0x8}, {0x4, 0x5, 0x2c1}, {0x5, 0x9, 0xb52e}, {0x401, 0x8, 0x7b}, {0x8, 0xfffffff7, 0x6}, {0x6, 0x20, 0x9}, {0x2, 0x8, 0x4}, {0x7fffffff, 0x8, 0x80}, {0x80, 0x8000, 0x1ff}, {0x40, 0x8, 0x3f}, {0x90, 0x400, 0xb}, {0xd1, 0x81, 0x7}, {0x9, 0x21, 0x1000}, {0x6, 0x40, 0x8}, {0xe1c, 0x1, 0x7}, {0x5, 0x8, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x8001, 0x5}, {0x2, 0xffffffff, 0x3}, {0x0, 0x3f, 0x98ca}, {0x5, 0x638e, 0x1}, {0x1ff, 0x8, 0x3d4e}, {0x1, 0x17b0, 0x1}, {0x0, 0x40, 0x7}, {0x9, 0xfffffffd, 0x200}, {0x0, 0x1, 0x5}, {0x34e, 0x10001, 0xdec5}, {0x2, 0x6, 0x3}, {0x8, 0x7fff, 0xff}, {0x3, 0xdb3d, 0x6}, {0xd07, 0x0, 0x4}, {0x3, 0x5, 0x24f}, {0x0, 0xb65, 0x3}, {0x7, 0xfe, 0x3}, {0x7, 0x76308bbe, 0x5}, {0x3, 0x422}, {0x0, 0x7, 0x8000}, {0x6, 0x3, 0xfff}, {0x1, 0x2, 0x100}, {0x6, 0x8, 0x7}, {0x0, 0x3, 0x4}, {0x7, 0x94, 0x40}, {0x3, 0x7, 0x3}, {0x8, 0xffff4fc0, 0x6}, {0x9, 0x0, 0xef}, {0xfffffffe, 0x5, 0x800}, {0x16, 0x6, 0x5}, {0x5e8, 0x759e6b8c, 0x8}, {0x3, 0xffffffff, 0x196}, {0xff, 0x7, 0x3}, {0xff, 0x3, 0x5}, {0xa1, 0x6, 0x7}, {0x0, 0x10000, 0x6}, {0x8d8, 0xffffffb5, 0x5}, {0x3, 0x9, 0x6}, {0x0, 0x7fffffff, 0x8}, {0x4, 0xdc, 0x2}, {0x1, 0xffffffff, 0x4}, {0x5, 0x9, 0x401}]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x100, 0xc, [0x20, 0x1, 0x401]}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc6db, 0x42002) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1, 0x1, &(0x7f0000000080)="80d555f0982b3a918b9928ce017841c366151e", 0x13, 0x200, 0x63b4, 0x7b, 0x8, 0x9, &(0x7f00000000c0)="599fd634937148f58d3cf3c4d821f4eb36505d449e21e233e5f63861cfcad3fdf41109df3dff3121d86aeebe6a1e0990146f846bbace1b22139fa2cfb1563c97cc18e4c10db7c2b9d4aee9a9aec54243e04860a0bd9109f2002613e68499", [{0xffffffb4, 0x9, 0x100}, {0x0, 0x101, 0x68}, {0x0, 0x3, 0x1}, {0x1, 0x4, 0x39f}, {0x1, 0x3, 0x81}, {0xf8, 0x9, 0xbc4}, {0x83, 0x4}, {0x4, 0x7, 0x3}, {0x7f, 0xf57, 0x401}, {0x6, 0x5}, {0x80000001, 0x2, 0x4}, {0x2, 0x6, 0x7}, {0xff, 0x7a, 0x8}, {0x10000, 0x3167, 0xf9e8}, {0x10001, 0x40, 0x7}, {0x2b, 0x3f, 0x4}, {0x41138c2b, 0x493, 0x1}, {0x3ff, 0x9, 0xdd50}, {0xfc2, 0x40, 0x9}, {0x2, 0x6, 0x400}, {0x1, 0x8, 0x38a}, {0x3, 0x6, 0x4}, {0x0, 0x3, 0x89}, {0x5, 0x100, 0x5}, {0x401, 0xaa6, 0x1}, {0x6, 0x0, 0x4}, {0x5, 0x6, 0x6}, {0xffff, 0x1, 0x6}, {0xff, 0x1, 0x6}, {0x31db, 0x1, 0x6}, {0x1, 0x101}, {0x100, 0x6, 0x6}, {0x9, 0x2, 0x4}, {0x3, 0x81, 0x4}, {0x3f, 0x7f, 0x3}, {0x6, 0x2, 0x3}, {0x4, 0x2, 0x9}, {0x2, 0x1, 0x842}, {0xad76, 0x0, 0xeb96}, {0xfffffffb, 0x4, 0x1ff}, {0x2, 0x48}, {0x1000, 0x6, 0x80000001}, {0xb3, 0xd912, 0x9}, {0x4, 0x8, 0x6}, {0xffff, 0xfffffe01, 0x5}, {0x1, 0x9}, {0xffff, 0x921d, 0x1}, {0x9, 0x6, 0x80000001}, {0x6d, 0x8, 0x8}, {0x4, 0x7fffffff, 0xfff}, {0x5, 0x7, 0x5}, {0x5a40, 0x7f, 0x3}, {0x0, 0xffffffff, 0x9}, {0xaaf, 0x80000001, 0x1000}, {0x1ff, 0x23, 0x10001}, {0x5, 0x1, 0x4}, {0x0, 0x8, 0x2}, {0x1ff, 0xfffffff9, 0x4}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1000}, {0x0, 0x6, 0x7f}, {0x6, 0x80, 0x6}, {0xdb, 0x0, 0x5}, {0x7f, 0x6, 0x2}, {0x400, 0xfffffffb, 0x8}, {0x4, 0x5, 0x2c1}, {0x5, 0x9, 0xb52e}, {0x401, 0x8, 0x7b}, {0x8, 0xfffffff7, 0x6}, {0x6, 0x20, 0x9}, {0x2, 0x8, 0x4}, {0x7fffffff, 0x8, 0x80}, {0x80, 0x8000, 0x1ff}, {0x40, 0x8, 0x3f}, {0x90, 0x400, 0xb}, {0xd1, 0x81, 0x7}, {0x9, 0x21, 0x1000}, {0x6, 0x40, 0x8}, {0xe1c, 0x1, 0x7}, {0x5, 0x8, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x8001, 0x5}, {0x2, 0xffffffff, 0x3}, {0x0, 0x3f, 0x98ca}, {0x5, 0x638e, 0x1}, {0x1ff, 0x8, 0x3d4e}, {0x1, 0x17b0, 0x1}, {0x0, 0x40, 0x7}, {0x9, 0xfffffffd, 0x200}, {0x0, 0x1, 0x5}, {0x34e, 0x10001, 0xdec5}, {0x2, 0x6, 0x3}, {0x8, 0x7fff, 0xff}, {0x3, 0xdb3d, 0x6}, {0xd07, 0x0, 0x4}, {0x3, 0x5, 0x24f}, {0x0, 0xb65, 0x3}, {0x7, 0xfe, 0x3}, {0x7, 0x76308bbe, 0x5}, {0x3, 0x422}, {0x0, 0x7, 0x8000}, {0x6, 0x3, 0xfff}, {0x1, 0x2, 0x100}, {0x6, 0x8, 0x7}, {0x0, 0x3, 0x4}, {0x7, 0x94, 0x40}, {0x3, 0x7, 0x3}, {0x8, 0xffff4fc0, 0x6}, {0x9, 0x0, 0xef}, {0xfffffffe, 0x5, 0x800}, {0x16, 0x6, 0x5}, {0x5e8, 0x759e6b8c, 0x8}, {0x3, 0xffffffff, 0x196}, {0xff, 0x7, 0x3}, {0xff, 0x3, 0x5}, {0xa1, 0x6, 0x7}, {0x0, 0x10000, 0x6}, {0x8d8, 0xffffffb5, 0x5}, {0x3, 0x9, 0x6}, {0x0, 0x7fffffff, 0x8}, {0x4, 0xdc, 0x2}, {0x1, 0xffffffff, 0x4}, {0x5, 0x9, 0x401}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xc6db, 0x42002) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1, 0x1, &(0x7f0000000080)="80d555f0982b3a918b9928ce017841c366151e", 0x13, 0x200, 0x63b4, 0x7b, 0x8, 0x9, &(0x7f00000000c0)="599fd634937148f58d3cf3c4d821f4eb36505d449e21e233e5f63861cfcad3fdf41109df3dff3121d86aeebe6a1e0990146f846bbace1b22139fa2cfb1563c97cc18e4c10db7c2b9d4aee9a9aec54243e04860a0bd9109f2002613e68499", [{0xffffffb4, 0x9, 0x100}, {0x0, 0x101, 0x68}, {0x0, 0x3, 0x1}, {0x1, 0x4, 0x39f}, {0x1, 0x3, 0x81}, {0xf8, 0x9, 0xbc4}, {0x83, 0x4}, {0x4, 0x7, 0x3}, {0x7f, 0xf57, 0x401}, {0x6, 0x5}, {0x80000001, 0x2, 0x4}, {0x2, 0x6, 0x7}, {0xff, 0x7a, 0x8}, {0x10000, 0x3167, 0xf9e8}, {0x10001, 0x40, 0x7}, {0x2b, 0x3f, 0x4}, {0x41138c2b, 0x493, 0x1}, {0x3ff, 0x9, 0xdd50}, {0xfc2, 0x40, 0x9}, {0x2, 0x6, 0x400}, {0x1, 0x8, 0x38a}, {0x3, 0x6, 0x4}, {0x0, 0x3, 0x89}, {0x5, 0x100, 0x5}, {0x401, 0xaa6, 0x1}, {0x6, 0x0, 0x4}, {0x5, 0x6, 0x6}, {0xffff, 0x1, 0x6}, {0xff, 0x1, 0x6}, {0x31db, 0x1, 0x6}, {0x1, 0x101}, {0x100, 0x6, 0x6}, {0x9, 0x2, 0x4}, {0x3, 0x81, 0x4}, {0x3f, 0x7f, 0x3}, {0x6, 0x2, 0x3}, {0x4, 0x2, 0x9}, {0x2, 0x1, 0x842}, {0xad76, 0x0, 0xeb96}, {0xfffffffb, 0x4, 0x1ff}, {0x2, 0x48}, {0x1000, 0x6, 0x80000001}, {0xb3, 0xd912, 0x9}, {0x4, 0x8, 0x6}, {0xffff, 0xfffffe01, 0x5}, {0x1, 0x9}, {0xffff, 0x921d, 0x1}, {0x9, 0x6, 0x80000001}, {0x6d, 0x8, 0x8}, {0x4, 0x7fffffff, 0xfff}, {0x5, 0x7, 0x5}, {0x5a40, 0x7f, 0x3}, {0x0, 0xffffffff, 0x9}, {0xaaf, 0x80000001, 0x1000}, {0x1ff, 0x23, 0x10001}, {0x5, 0x1, 0x4}, {0x0, 0x8, 0x2}, {0x1ff, 0xfffffff9, 0x4}, {0x5, 0x4, 0x4}, {0x9, 0x1, 0x1000}, {0x0, 0x6, 0x7f}, {0x6, 0x80, 0x6}, {0xdb, 0x0, 0x5}, {0x7f, 0x6, 0x2}, {0x400, 0xfffffffb, 0x8}, {0x4, 0x5, 0x2c1}, {0x5, 0x9, 0xb52e}, {0x401, 0x8, 0x7b}, {0x8, 0xfffffff7, 0x6}, {0x6, 0x20, 0x9}, {0x2, 0x8, 0x4}, {0x7fffffff, 0x8, 0x80}, {0x80, 0x8000, 0x1ff}, {0x40, 0x8, 0x3f}, {0x90, 0x400, 0xb}, {0xd1, 0x81, 0x7}, {0x9, 0x21, 0x1000}, {0x6, 0x40, 0x8}, {0xe1c, 0x1, 0x7}, {0x5, 0x8, 0x1}, {0x0, 0x1, 0x5}, {0x3, 0x8001, 0x5}, {0x2, 0xffffffff, 0x3}, {0x0, 0x3f, 0x98ca}, {0x5, 0x638e, 0x1}, {0x1ff, 0x8, 0x3d4e}, {0x1, 0x17b0, 0x1}, {0x0, 0x40, 0x7}, {0x9, 0xfffffffd, 0x200}, {0x0, 0x1, 0x5}, {0x34e, 0x10001, 0xdec5}, {0x2, 0x6, 0x3}, {0x8, 0x7fff, 0xff}, {0x3, 0xdb3d, 0x6}, {0xd07, 0x0, 0x4}, {0x3, 0x5, 0x24f}, {0x0, 0xb65, 0x3}, {0x7, 0xfe, 0x3}, {0x7, 0x76308bbe, 0x5}, {0x3, 0x422}, {0x0, 0x7, 0x8000}, {0x6, 0x3, 0xfff}, {0x1, 0x2, 0x100}, {0x6, 0x8, 0x7}, {0x0, 0x3, 0x4}, {0x7, 0x94, 0x40}, {0x3, 0x7, 0x3}, {0x8, 0xffff4fc0, 0x6}, {0x9, 0x0, 0xef}, {0xfffffffe, 0x5, 0x800}, {0x16, 0x6, 0x5}, {0x5e8, 0x759e6b8c, 0x8}, {0x3, 0xffffffff, 0x196}, {0xff, 0x7, 0x3}, {0xff, 0x3, 0x5}, {0xa1, 0x6, 0x7}, {0x0, 0x10000, 0x6}, {0x8d8, 0xffffffb5, 0x5}, {0x3, 0x9, 0x6}, {0x0, 0x7fffffff, 0x8}, {0x4, 0xdc, 0x2}, {0x1, 0xffffffff, 0x4}, {0x5, 0x9, 0x401}]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x4]}) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffff8, 0x4) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0xfffffff8) (async) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0xfffffff8) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000002c0)=0xfffffff8) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101402) close$fd_v4l2_buffer(r0) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x100, 0xc, [0x20, 0x1, 0x401]}) (rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84200) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffff8, 0x4) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x529000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x529000, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x529000, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000140)={0xf, 0x0, 0x6}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000000c0)=0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x7ff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r9) ioctl$USBDEVFS_DISCARDURB(r9, 0x550b, &(0x7f0000000440)=0x7fffffffffffffff) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{@none}, {}, {@none}]}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x1f0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}, {0x6, 0x11, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x99}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7c70}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x48081}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r8) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:25 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x84200) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffff8, 0x4) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101402) close$fd_v4l2_buffer(r0) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000140)={0xf, 0x0, 0x6}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000000c0)=0x1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x7ff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r9) (async) ioctl$USBDEVFS_DISCARDURB(r9, 0x550b, &(0x7f0000000440)=0x7fffffffffffffff) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r10) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{@none}, {}, {@none}]}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x1f0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}, {0x6, 0x11, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x99}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7c70}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r8) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101402) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101402) (async) close$fd_v4l2_buffer(r0) (async) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x4000, 0xe5b, {}, {0x4, 0x0, 0x26, 0x80, 0x49, 0x0, 'QIsD'}, 0x401, 0x4, {}, 0xff, 0x0, r0}) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x529000, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 2: sendto$phonet(0xffffffffffffffff, &(0x7f0000000240)="cd486920000000d687646e0008e500a4000000000000009414331be96416640974fd2beb5a7dfc4518bccbd0c951f6c07c482ab834a88b2c52dade78e71b3cba8cb7324996ec616e225762e1782890dcf095a6929605f8f0e54c0b741a2b", 0x5e, 0x20004000, &(0x7f0000000080)={0x23, 0xff, 0x1f, 0xb}, 0x10) bind$phonet(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xe4}, 0x10) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4640) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000100)={0x8, 0x0, "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"}) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0xc040001) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x8000, 0x1, 0x7, 0x4, '\x00', '\x00', '\x00', 0x4, 0x8, 0x4, 0xa6e, "14aaa986991a58478d59be01bc5b8099"}) close$fd_v4l2_buffer(r0) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 2: sendto$phonet(0xffffffffffffffff, &(0x7f0000000240)="cd486920000000d687646e0008e500a4000000000000009414331be96416640974fd2beb5a7dfc4518bccbd0c951f6c07c482ab834a88b2c52dade78e71b3cba8cb7324996ec616e225762e1782890dcf095a6929605f8f0e54c0b741a2b", 0x5e, 0x20004000, &(0x7f0000000080)={0x23, 0xff, 0x1f, 0xb}, 0x10) (async) bind$phonet(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xe4}, 0x10) (async, rerun: 32) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10) (rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4640) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000100)={0x8, 0x0, "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"}) 07:02:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000140)={0xf, 0x0, 0x6}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000000c0)=0x1) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async, rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x7ff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r7) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r9) ioctl$USBDEVFS_DISCARDURB(r9, 0x550b, &(0x7f0000000440)=0x7fffffffffffffff) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{@none}, {}, {@none}]}) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x1f0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}, {0x6, 0x11, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x99}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7c70}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r8) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:25 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x4000, 0xe5b, {}, {0x4, 0x0, 0x26, 0x80, 0x49, 0x0, 'QIsD'}, 0x401, 0x4, {}, 0xff, 0x0, r0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x4000, 0xe5b, {}, {0x4, 0x0, 0x26, 0x80, 0x49, 0x0, 'QIsD'}, 0x401, 0x4, {}, 0xff, 0x0, r0}) (async) 07:02:25 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0xc040001) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x8000, 0x1, 0x7, 0x4, '\x00', '\x00', '\x00', 0x4, 0x8, 0x4, 0xa6e, "14aaa986991a58478d59be01bc5b8099"}) close$fd_v4l2_buffer(r0) 07:02:25 executing program 2: sendto$phonet(0xffffffffffffffff, &(0x7f0000000240)="cd486920000000d687646e0008e500a4000000000000009414331be96416640974fd2beb5a7dfc4518bccbd0c951f6c07c482ab834a88b2c52dade78e71b3cba8cb7324996ec616e225762e1782890dcf095a6929605f8f0e54c0b741a2b", 0x5e, 0x20004000, &(0x7f0000000080)={0x23, 0xff, 0x1f, 0xb}, 0x10) (async) bind$phonet(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0xe4}, 0x10) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4640) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000100)={0x8, 0x0, "a89746eeda1e618a62907f493b4f49ec6eef000290f4a1e9adec03324eac5834c934c5f2e04c38da50fe799f5936cad3f546a3266822f002394f9af117546cf21a96615fc0048ed7e5687304074c85f005e0542307d7ba8077ecaf30245fee1145a44409e65c6299ef93500f34a89f09a692ea166fb0eb3e2083691f6dcfcd25dac68330a72e34860422722156ba41ff97e338e913550d5d2ddbfc902e17445eca68e82ff311e90200c169c7cf037a56f4a095cf73cf3a350287d3021ca8732facf4c029624dd0ded1b0731dae0323ef172a7372e620a7333878d1edda1567d270f48e9addb69b24bcdb52d8a5ae5c565bc266d04a63c212d720310cbd33c219"}) 07:02:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc12}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4804) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0xc040001) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffff8, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x8000, 0x1, 0x7, 0x4, '\x00', '\x00', '\x00', 0x4, 0x8, 0x4, 0xa6e, "14aaa986991a58478d59be01bc5b8099"}) (async) close$fd_v4l2_buffer(r0) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x4000, 0xe5b, {}, {0x4, 0x0, 0x26, 0x80, 0x49, 0x0, 'QIsD'}, 0x401, 0x4, {}, 0xff, 0x0, r0}) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc12}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4804) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x80) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 5: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x0, &(0x7f0000000080)={0x23, 0x20, 0x80, 0xe}, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x10000, 0x12241) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480100, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 07:02:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc12}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4804) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xc12}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x4804) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async) 07:02:26 executing program 5: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x0, &(0x7f0000000080)={0x23, 0x20, 0x80, 0xe}, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x10000, 0x12241) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480100, 0x0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x80) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 5: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x0, &(0x7f0000000080)={0x23, 0x20, 0x80, 0xe}, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x10000, 0x12241) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480100, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x0, &(0x7f0000000080)={0x23, 0x20, 0x80, 0xe}, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x10000, 0x12241) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480100, 0x0) (async) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) syz_open_dev$usbfs(&(0x7f0000000100), 0xaca, 0x280100) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x47ff, 0xfefffff9}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 07:02:26 executing program 2: socket(0x25, 0x5, 0x620) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x9, 0x80, &(0x7f0000000000)="dfbb190b", 0x4, 0x2, 0xfb6f, 0x6f, 0x9577, 0x3f, &(0x7f0000000080)="25ecacf6fae6ba97bd0cf4789f60852dd727070e2bc4fcaed3c89d788e3f42b64550c75e0643752f7e23a157fc44cc33a2093031091b7d19513224ca", [{0x2, 0x4, 0x1}, {0x1, 0x2, 0xff}, {0x49a, 0x4, 0x7}, {0x7, 0x5, 0x80000001}, {0x2, 0x2}, {0x6fd0c867, 0x8d0, 0x101}, {0x7fffffff, 0x2, 0x7}, {0x1000, 0x3, 0x4}, {0x9, 0x6, 0x1b}, {0xffffffff, 0x3, 0x4}, {0x101, 0x10001, 0x5}, {0x7, 0x3, 0x9b3}, {0x7f2edb64, 0x4, 0xbb71}, {0x9, 0x8, 0x7}, {0x8, 0x80000000, 0x7fff}, {0x3}, {0x5, 0x1, 0x8}, {0x4, 0x7, 0x2}, {0x12, 0x9fa, 0x7}, {0x0, 0x7, 0x5}, {0x9, 0x8}, {0x7fffffff, 0x8, 0x9ea}, {0x2, 0xfffffffe, 0x200}, {0xffff7fff, 0x0, 0x10000}, {0x3, 0x7ff, 0x1}, {0x1ff, 0x8, 0x6}, {0x2000000, 0x359f, 0x4}, {0x8, 0x3, 0x9606}, {0x6, 0x1, 0x5}, {0x1, 0x3, 0x9}, {0xb31, 0xf35, 0x8001}, {0x9, 0xff, 0x9}, {0xfffffff8, 0x7, 0x6}, {0x4, 0x1, 0xffff}, {0xfffffeff, 0x40, 0x7}, {0x10001, 0xc2a, 0x1}, {0x7, 0x3ff, 0x1}, {0x1000, 0x1, 0x7ff}, {0x2, 0xffff, 0x7fffffff}, {0x0, 0x3, 0x2c65}, {0x5fc5a700, 0x401, 0x8}, {0xe72, 0x0, 0x8}, {0x5, 0x7ff, 0x401}, {0x6d02, 0x1, 0x200}, {0x42, 0xffffff11, 0x7}, {0x91b, 0x1, 0x22}, {0x2, 0x5, 0x1f}, {0x5, 0x7, 0x20}, {0x7, 0xf67, 0x2}, {0x3, 0x1, 0xe3}, {0x3, 0x1, 0x1000}, {0x7fffffff, 0x4, 0x2}, {0x9, 0x7, 0x1f}, {0x1f, 0x7, 0x101}, {0x800, 0x3, 0x7f}, {0x3, 0x1, 0x7}, {0x6, 0x6, 0x5}, {0xfff, 0x938, 0x3}, {0xe8, 0xfffff936, 0x420b}, {0x10001, 0x1, 0x800}, {0xfff, 0x2, 0xfffffeff}, {0xf73, 0x8, 0x1ff}, {0x3, 0x5, 0x28b}, {0x40, 0x0, 0x9599}, {0xffffffff, 0x9, 0x1f}, {0xfffff801, 0x9}, {0x1f, 0x1, 0x7}, {0x30, 0x2, 0x5}, {0x7ff, 0x4, 0x9bc4}, {0x7, 0x5, 0x6}, {0x1, 0x3ff, 0x101}, {0x3a400, 0xe17}, {0x7, 0xff, 0x1}, {0x1, 0x0, 0x5}, {0x29, 0x9, 0x8001}, {0x81, 0xffff, 0x9}, {0x200, 0x4, 0x7}, {0x1, 0x8, 0x5}, {0x995, 0x8}, {0x5, 0xffffffff}, {0xd25, 0xd53, 0x6}, {0xbb, 0x2, 0x800}, {0xef39, 0xa7e, 0x3}, {0x2, 0x7, 0x247}, {0x7f, 0xfffffffe, 0x9}, {0xc23, 0x8000, 0xfffffffa}, {0x5, 0x1, 0x4}, {0x1, 0x1, 0x2}, {0x8, 0x4, 0x6}, {0x80000000, 0x7, 0x1}, {0x9, 0x0, 0x10001}, {0x0, 0x41, 0xb8e}, {0x7fff, 0x7}, {0x10001, 0x8, 0x10000}, {0x4, 0x8, 0xffffffff}, {0x3, 0x5e7e2fe4, 0x6}, {0x7, 0x5, 0x9}, {0xffffffff, 0x3, 0x5}, {0x3, 0x6, 0x5}, {0x6, 0x0, 0x10001}, {0x9, 0xffffffff, 0x9}, {0x1d, 0xe1e, 0x7a9c1b4e}, {0xfff, 0x1, 0x2}, {0x0, 0x8, 0xfff}, {0x7, 0x8, 0xff}, {0x5, 0x40, 0x22e9}, {0x7, 0x9, 0x5}, {0x10001, 0x0, 0x100}, {0xab1, 0x4, 0x9}, {0xfffffffe, 0x8, 0x400}, {0x0, 0x40, 0x5}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff000000000081dbe080102c445dcee667b73d72487c28e2a0f435c255270add6fd5990fe2c9377793eb879ac5df097cec"]) 07:02:26 executing program 2: socket(0x25, 0x5, 0x620) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) socket(0x25, 0x5, 0x620) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff"], 0x4c}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c810}, 0x20008819) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x9, 0x80, &(0x7f0000000000)="dfbb190b", 0x4, 0x2, 0xfb6f, 0x6f, 0x9577, 0x3f, &(0x7f0000000080)="25ecacf6fae6ba97bd0cf4789f60852dd727070e2bc4fcaed3c89d788e3f42b64550c75e0643752f7e23a157fc44cc33a2093031091b7d19513224ca", [{0x2, 0x4, 0x1}, {0x1, 0x2, 0xff}, {0x49a, 0x4, 0x7}, {0x7, 0x5, 0x80000001}, {0x2, 0x2}, {0x6fd0c867, 0x8d0, 0x101}, {0x7fffffff, 0x2, 0x7}, {0x1000, 0x3, 0x4}, {0x9, 0x6, 0x1b}, {0xffffffff, 0x3, 0x4}, {0x101, 0x10001, 0x5}, {0x7, 0x3, 0x9b3}, {0x7f2edb64, 0x4, 0xbb71}, {0x9, 0x8, 0x7}, {0x8, 0x80000000, 0x7fff}, {0x3}, {0x5, 0x1, 0x8}, {0x4, 0x7, 0x2}, {0x12, 0x9fa, 0x7}, {0x0, 0x7, 0x5}, {0x9, 0x8}, {0x7fffffff, 0x8, 0x9ea}, {0x2, 0xfffffffe, 0x200}, {0xffff7fff, 0x0, 0x10000}, {0x3, 0x7ff, 0x1}, {0x1ff, 0x8, 0x6}, {0x2000000, 0x359f, 0x4}, {0x8, 0x3, 0x9606}, {0x6, 0x1, 0x5}, {0x1, 0x3, 0x9}, {0xb31, 0xf35, 0x8001}, {0x9, 0xff, 0x9}, {0xfffffff8, 0x7, 0x6}, {0x4, 0x1, 0xffff}, {0xfffffeff, 0x40, 0x7}, {0x10001, 0xc2a, 0x1}, {0x7, 0x3ff, 0x1}, {0x1000, 0x1, 0x7ff}, {0x2, 0xffff, 0x7fffffff}, {0x0, 0x3, 0x2c65}, {0x5fc5a700, 0x401, 0x8}, {0xe72, 0x0, 0x8}, {0x5, 0x7ff, 0x401}, {0x6d02, 0x1, 0x200}, {0x42, 0xffffff11, 0x7}, {0x91b, 0x1, 0x22}, {0x2, 0x5, 0x1f}, {0x5, 0x7, 0x20}, {0x7, 0xf67, 0x2}, {0x3, 0x1, 0xe3}, {0x3, 0x1, 0x1000}, {0x7fffffff, 0x4, 0x2}, {0x9, 0x7, 0x1f}, {0x1f, 0x7, 0x101}, {0x800, 0x3, 0x7f}, {0x3, 0x1, 0x7}, {0x6, 0x6, 0x5}, {0xfff, 0x938, 0x3}, {0xe8, 0xfffff936, 0x420b}, {0x10001, 0x1, 0x800}, {0xfff, 0x2, 0xfffffeff}, {0xf73, 0x8, 0x1ff}, {0x3, 0x5, 0x28b}, {0x40, 0x0, 0x9599}, {0xffffffff, 0x9, 0x1f}, {0xfffff801, 0x9}, {0x1f, 0x1, 0x7}, {0x30, 0x2, 0x5}, {0x7ff, 0x4, 0x9bc4}, {0x7, 0x5, 0x6}, {0x1, 0x3ff, 0x101}, {0x3a400, 0xe17}, {0x7, 0xff, 0x1}, {0x1, 0x0, 0x5}, {0x29, 0x9, 0x8001}, {0x81, 0xffff, 0x9}, {0x200, 0x4, 0x7}, {0x1, 0x8, 0x5}, {0x995, 0x8}, {0x5, 0xffffffff}, {0xd25, 0xd53, 0x6}, {0xbb, 0x2, 0x800}, {0xef39, 0xa7e, 0x3}, {0x2, 0x7, 0x247}, {0x7f, 0xfffffffe, 0x9}, {0xc23, 0x8000, 0xfffffffa}, {0x5, 0x1, 0x4}, {0x1, 0x1, 0x2}, {0x8, 0x4, 0x6}, {0x80000000, 0x7, 0x1}, {0x9, 0x0, 0x10001}, {0x0, 0x41, 0xb8e}, {0x7fff, 0x7}, {0x10001, 0x8, 0x10000}, {0x4, 0x8, 0xffffffff}, {0x3, 0x5e7e2fe4, 0x6}, {0x7, 0x5, 0x9}, {0xffffffff, 0x3, 0x5}, {0x3, 0x6, 0x5}, {0x6, 0x0, 0x10001}, {0x9, 0xffffffff, 0x9}, {0x1d, 0xe1e, 0x7a9c1b4e}, {0xfff, 0x1, 0x2}, {0x0, 0x8, 0xfff}, {0x7, 0x8, 0xff}, {0x5, 0x40, 0x22e9}, {0x7, 0x9, 0x5}, {0x10001, 0x0, 0x100}, {0xab1, 0x4, 0x9}, {0xfffffffe, 0x8, 0x400}, {0x0, 0x40, 0x5}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff000000000081dbe080102c445dcee667b73d72487c28e2a0f435c255270add6fd5990fe2c9377793eb879ac5df097cec"]) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x9, 0x80, &(0x7f0000000000)="dfbb190b", 0x4, 0x2, 0xfb6f, 0x6f, 0x9577, 0x3f, &(0x7f0000000080)="25ecacf6fae6ba97bd0cf4789f60852dd727070e2bc4fcaed3c89d788e3f42b64550c75e0643752f7e23a157fc44cc33a2093031091b7d19513224ca", [{0x2, 0x4, 0x1}, {0x1, 0x2, 0xff}, {0x49a, 0x4, 0x7}, {0x7, 0x5, 0x80000001}, {0x2, 0x2}, {0x6fd0c867, 0x8d0, 0x101}, {0x7fffffff, 0x2, 0x7}, {0x1000, 0x3, 0x4}, {0x9, 0x6, 0x1b}, {0xffffffff, 0x3, 0x4}, {0x101, 0x10001, 0x5}, {0x7, 0x3, 0x9b3}, {0x7f2edb64, 0x4, 0xbb71}, {0x9, 0x8, 0x7}, {0x8, 0x80000000, 0x7fff}, {0x3}, {0x5, 0x1, 0x8}, {0x4, 0x7, 0x2}, {0x12, 0x9fa, 0x7}, {0x0, 0x7, 0x5}, {0x9, 0x8}, {0x7fffffff, 0x8, 0x9ea}, {0x2, 0xfffffffe, 0x200}, {0xffff7fff, 0x0, 0x10000}, {0x3, 0x7ff, 0x1}, {0x1ff, 0x8, 0x6}, {0x2000000, 0x359f, 0x4}, {0x8, 0x3, 0x9606}, {0x6, 0x1, 0x5}, {0x1, 0x3, 0x9}, {0xb31, 0xf35, 0x8001}, {0x9, 0xff, 0x9}, {0xfffffff8, 0x7, 0x6}, {0x4, 0x1, 0xffff}, {0xfffffeff, 0x40, 0x7}, {0x10001, 0xc2a, 0x1}, {0x7, 0x3ff, 0x1}, {0x1000, 0x1, 0x7ff}, {0x2, 0xffff, 0x7fffffff}, {0x0, 0x3, 0x2c65}, {0x5fc5a700, 0x401, 0x8}, {0xe72, 0x0, 0x8}, {0x5, 0x7ff, 0x401}, {0x6d02, 0x1, 0x200}, {0x42, 0xffffff11, 0x7}, {0x91b, 0x1, 0x22}, {0x2, 0x5, 0x1f}, {0x5, 0x7, 0x20}, {0x7, 0xf67, 0x2}, {0x3, 0x1, 0xe3}, {0x3, 0x1, 0x1000}, {0x7fffffff, 0x4, 0x2}, {0x9, 0x7, 0x1f}, {0x1f, 0x7, 0x101}, {0x800, 0x3, 0x7f}, {0x3, 0x1, 0x7}, {0x6, 0x6, 0x5}, {0xfff, 0x938, 0x3}, {0xe8, 0xfffff936, 0x420b}, {0x10001, 0x1, 0x800}, {0xfff, 0x2, 0xfffffeff}, {0xf73, 0x8, 0x1ff}, {0x3, 0x5, 0x28b}, {0x40, 0x0, 0x9599}, {0xffffffff, 0x9, 0x1f}, {0xfffff801, 0x9}, {0x1f, 0x1, 0x7}, {0x30, 0x2, 0x5}, {0x7ff, 0x4, 0x9bc4}, {0x7, 0x5, 0x6}, {0x1, 0x3ff, 0x101}, {0x3a400, 0xe17}, {0x7, 0xff, 0x1}, {0x1, 0x0, 0x5}, {0x29, 0x9, 0x8001}, {0x81, 0xffff, 0x9}, {0x200, 0x4, 0x7}, {0x1, 0x8, 0x5}, {0x995, 0x8}, {0x5, 0xffffffff}, {0xd25, 0xd53, 0x6}, {0xbb, 0x2, 0x800}, {0xef39, 0xa7e, 0x3}, {0x2, 0x7, 0x247}, {0x7f, 0xfffffffe, 0x9}, {0xc23, 0x8000, 0xfffffffa}, {0x5, 0x1, 0x4}, {0x1, 0x1, 0x2}, {0x8, 0x4, 0x6}, {0x80000000, 0x7, 0x1}, {0x9, 0x0, 0x10001}, {0x0, 0x41, 0xb8e}, {0x7fff, 0x7}, {0x10001, 0x8, 0x10000}, {0x4, 0x8, 0xffffffff}, {0x3, 0x5e7e2fe4, 0x6}, {0x7, 0x5, 0x9}, {0xffffffff, 0x3, 0x5}, {0x3, 0x6, 0x5}, {0x6, 0x0, 0x10001}, {0x9, 0xffffffff, 0x9}, {0x1d, 0xe1e, 0x7a9c1b4e}, {0xfff, 0x1, 0x2}, {0x0, 0x8, 0xfff}, {0x7, 0x8, 0xff}, {0x5, 0x40, 0x22e9}, {0x7, 0x9, 0x5}, {0x10001, 0x0, 0x100}, {0xab1, 0x4, 0x9}, {0xfffffffe, 0x8, 0x400}, {0x0, 0x40, 0x5}]}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff000000000081dbe080102c445dcee667b73d72487c28e2a0f435c255270add6fd5990fe2c9377793eb879ac5df097cec"]) (async) 07:02:26 executing program 2: socket(0x25, 0x5, 0x620) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) syz_open_dev$usbfs(&(0x7f0000000100), 0xaca, 0x280100) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x47ff, 0xfefffff9}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0xaca, 0x280100) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x47ff, 0xfefffff9}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xffffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff"], 0x4c}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c810}, 0x20008819) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff"], 0x4c}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c810}, 0x20008819) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x155a00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x376, 0x76, 0x12, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7, 0x9, 0x4, 0xac7, r1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xb}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) syz_open_dev$usbfs(&(0x7f0000000100), 0xaca, 0x280100) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x47ff, 0xfefffff9}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x9, 0x80, &(0x7f0000000000)="dfbb190b", 0x4, 0x2, 0xfb6f, 0x6f, 0x9577, 0x3f, &(0x7f0000000080)="25ecacf6fae6ba97bd0cf4789f60852dd727070e2bc4fcaed3c89d788e3f42b64550c75e0643752f7e23a157fc44cc33a2093031091b7d19513224ca", [{0x2, 0x4, 0x1}, {0x1, 0x2, 0xff}, {0x49a, 0x4, 0x7}, {0x7, 0x5, 0x80000001}, {0x2, 0x2}, {0x6fd0c867, 0x8d0, 0x101}, {0x7fffffff, 0x2, 0x7}, {0x1000, 0x3, 0x4}, {0x9, 0x6, 0x1b}, {0xffffffff, 0x3, 0x4}, {0x101, 0x10001, 0x5}, {0x7, 0x3, 0x9b3}, {0x7f2edb64, 0x4, 0xbb71}, {0x9, 0x8, 0x7}, {0x8, 0x80000000, 0x7fff}, {0x3}, {0x5, 0x1, 0x8}, {0x4, 0x7, 0x2}, {0x12, 0x9fa, 0x7}, {0x0, 0x7, 0x5}, {0x9, 0x8}, {0x7fffffff, 0x8, 0x9ea}, {0x2, 0xfffffffe, 0x200}, {0xffff7fff, 0x0, 0x10000}, {0x3, 0x7ff, 0x1}, {0x1ff, 0x8, 0x6}, {0x2000000, 0x359f, 0x4}, {0x8, 0x3, 0x9606}, {0x6, 0x1, 0x5}, {0x1, 0x3, 0x9}, {0xb31, 0xf35, 0x8001}, {0x9, 0xff, 0x9}, {0xfffffff8, 0x7, 0x6}, {0x4, 0x1, 0xffff}, {0xfffffeff, 0x40, 0x7}, {0x10001, 0xc2a, 0x1}, {0x7, 0x3ff, 0x1}, {0x1000, 0x1, 0x7ff}, {0x2, 0xffff, 0x7fffffff}, {0x0, 0x3, 0x2c65}, {0x5fc5a700, 0x401, 0x8}, {0xe72, 0x0, 0x8}, {0x5, 0x7ff, 0x401}, {0x6d02, 0x1, 0x200}, {0x42, 0xffffff11, 0x7}, {0x91b, 0x1, 0x22}, {0x2, 0x5, 0x1f}, {0x5, 0x7, 0x20}, {0x7, 0xf67, 0x2}, {0x3, 0x1, 0xe3}, {0x3, 0x1, 0x1000}, {0x7fffffff, 0x4, 0x2}, {0x9, 0x7, 0x1f}, {0x1f, 0x7, 0x101}, {0x800, 0x3, 0x7f}, {0x3, 0x1, 0x7}, {0x6, 0x6, 0x5}, {0xfff, 0x938, 0x3}, {0xe8, 0xfffff936, 0x420b}, {0x10001, 0x1, 0x800}, {0xfff, 0x2, 0xfffffeff}, {0xf73, 0x8, 0x1ff}, {0x3, 0x5, 0x28b}, {0x40, 0x0, 0x9599}, {0xffffffff, 0x9, 0x1f}, {0xfffff801, 0x9}, {0x1f, 0x1, 0x7}, {0x30, 0x2, 0x5}, {0x7ff, 0x4, 0x9bc4}, {0x7, 0x5, 0x6}, {0x1, 0x3ff, 0x101}, {0x3a400, 0xe17}, {0x7, 0xff, 0x1}, {0x1, 0x0, 0x5}, {0x29, 0x9, 0x8001}, {0x81, 0xffff, 0x9}, {0x200, 0x4, 0x7}, {0x1, 0x8, 0x5}, {0x995, 0x8}, {0x5, 0xffffffff}, {0xd25, 0xd53, 0x6}, {0xbb, 0x2, 0x800}, {0xef39, 0xa7e, 0x3}, {0x2, 0x7, 0x247}, {0x7f, 0xfffffffe, 0x9}, {0xc23, 0x8000, 0xfffffffa}, {0x5, 0x1, 0x4}, {0x1, 0x1, 0x2}, {0x8, 0x4, 0x6}, {0x80000000, 0x7, 0x1}, {0x9, 0x0, 0x10001}, {0x0, 0x41, 0xb8e}, {0x7fff, 0x7}, {0x10001, 0x8, 0x10000}, {0x4, 0x8, 0xffffffff}, {0x3, 0x5e7e2fe4, 0x6}, {0x7, 0x5, 0x9}, {0xffffffff, 0x3, 0x5}, {0x3, 0x6, 0x5}, {0x6, 0x0, 0x10001}, {0x9, 0xffffffff, 0x9}, {0x1d, 0xe1e, 0x7a9c1b4e}, {0xfff, 0x1, 0x2}, {0x0, 0x8, 0xfff}, {0x7, 0x8, 0xff}, {0x5, 0x40, 0x22e9}, {0x7, 0x9, 0x5}, {0x10001, 0x0, 0x100}, {0xab1, 0x4, 0x9}, {0xfffffffe, 0x8, 0x400}, {0x0, 0x40, 0x5}]}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff000000000081dbe080102c445dcee667b73d72487c28e2a0f435c255270add6fd5990fe2c9377793eb879ac5df097cec"]) 07:02:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x155a00) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x376, 0x76, 0x12, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7, 0x9, 0x4, 0xac7, r1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xb}, 0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff"], 0x4c}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c810}, 0x20008819) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x0, 0x9, 0x8, 0xc8, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x4, 0x5}, 0x48) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x440080, 0x0) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x105882) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/69) close$fd_v4l2_buffer(r0) 07:02:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x155a00) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0x376, 0x76, 0x12, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7, 0x9, 0x4, 0xac7, r1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xb}, 0x48) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (rerun: 64) 07:02:26 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x440080, 0x0) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x105882) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/69) close$fd_v4l2_buffer(r0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x440080, 0x0) (async) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x105882) (async) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/69) (async) close$fd_v4l2_buffer(r0) (async) 07:02:26 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x1, 0x4, [0x1]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x0, 0x9, 0x8, 0xc8, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x4, 0x5}, 0x48) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x0, 0x9, 0x8, 0xc8, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x4, 0x5}, 0x48) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x1f, 0x18, [0x3, 0x5, 0xc221, 0x1ff, 0x7fffffff, 0x9]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x8, 0x10, 0x1000, 0xfffffff8, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x5, 0x40, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x0, 0x9, 0x8, 0xc8, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x4, 0x5}, 0x48) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x440080, 0x0) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) (async) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x105882) (async) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/69) (async) close$fd_v4l2_buffer(r0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x17, 0x0, 0xff, 0x3d, 0x1, &(0x7f0000000040)="c291daf4ff99dfacbb0cbf614e0efe631131373569d65b8a7c95ffb3c1a048855369cb0f578193a3e41c7f6686b9d5988fb583f51abb09de42d7e3fcb8"}) 07:02:26 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x1, 0x4, [0x1]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x1f, 0x18, [0x3, 0x5, 0xc221, 0x1ff, 0x7fffffff, 0x9]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x8, 0x10, 0x1000, 0xfffffff8, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x5, 0x40, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x1f, 0x18, [0x3, 0x5, 0xc221, 0x1ff, 0x7fffffff, 0x9]}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x8, 0x10, 0x1000, 0xfffffff8, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x5, 0x40, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:26 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x1, 0x4, [0x1]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x1, 0x4, [0x1]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x17, 0x0, 0xff, 0x3d, 0x1, &(0x7f0000000040)="c291daf4ff99dfacbb0cbf614e0efe631131373569d65b8a7c95ffb3c1a048855369cb0f578193a3e41c7f6686b9d5988fb583f51abb09de42d7e3fcb8"}) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7fff, 0x200, 0x40, 0x4}, 0x29, [0x7, 0x5, 0x31, 0x1, 0x7fffffff, 0xb3, 0x1bfa, 0xfffffffb, 0x80000001, 0x0, 0x2, 0x1, 0x40, 0x81, 0x8, 0x3ff, 0xfa, 0x1, 0x1, 0x40, 0x7, 0xee2, 0x1, 0x5, 0x2, 0x40, 0x81, 0x0, 0x8, 0x1f, 0x4, 0xf6, 0xff9a, 0x7, 0x1, 0x2, 0x6, 0x3, 0x1, 0xfffffffc, 0xbc, 0x61, 0x3, 0x0, 0x7db4, 0x0, 0xa14, 0x4ee, 0x5, 0x3, 0x47533ef8, 0xa386, 0x19f00000, 0x10001, 0x4, 0x0, 0x7fff, 0x3ff, 0x6, 0x8000, 0x4, 0x6, 0x8], [0xa07, 0x7, 0x4, 0x0, 0x3, 0x20, 0x40, 0x1000, 0x1, 0x1, 0x0, 0x8000, 0x44b3, 0xd3, 0x1228, 0x5, 0x8, 0x5, 0x3, 0xea30, 0x7, 0x1, 0x1cc, 0x2, 0x0, 0x8, 0x4, 0x8, 0x4, 0x101, 0x7, 0x0, 0x8, 0x38d0, 0x8, 0x1f, 0xa5c, 0x1, 0x1, 0x92, 0x3b9e, 0x5, 0xd7, 0x4, 0x7, 0x6, 0x9, 0x0, 0x7, 0x8000, 0x4, 0x3c2a, 0x4, 0x0, 0x4, 0x7fff, 0x8, 0x5, 0x1908, 0x3, 0x8, 0x2, 0x7fff, 0x80000000], [0x9f, 0x7cf4, 0x400, 0xe787, 0xc00000, 0x0, 0x8, 0x1b, 0x4, 0x1ff, 0x5eea, 0x8, 0x0, 0xe8, 0x4, 0xbc0d, 0x8, 0xffffffda, 0xfffffffd, 0x36, 0x1, 0xe7, 0x756, 0x5, 0x101, 0x7, 0x8, 0x9, 0x66e, 0x8, 0x7, 0x11e5, 0x80000001, 0x9, 0x1, 0x2, 0x6, 0x7, 0x8, 0xfffffffa, 0x7fffffff, 0x69d, 0x7e, 0x5, 0x466, 0x7, 0x2f504302, 0x7fffffff, 0x32, 0x5, 0x2, 0x7f, 0x400, 0x8, 0xf8, 0x9, 0x7fffffff, 0x4, 0x0, 0x3, 0x800, 0x4, 0x6, 0xffffffa9], [0x8, 0x4, 0x3, 0x5, 0x5, 0x2, 0xda25, 0x1000, 0x80000000, 0x1f, 0x80000001, 0x1e, 0x3, 0x2, 0x33a, 0x8, 0xc16, 0x2, 0x3, 0x1, 0x7, 0x8, 0x1c, 0x72f, 0x1, 0x9, 0x1, 0x140000, 0x0, 0xda, 0x5f601e9d, 0x6, 0xe15, 0x10001, 0x1, 0x1000, 0x101, 0x8, 0x81, 0xffffffe1, 0x4, 0x5, 0xffffffff, 0xdf, 0x0, 0x4b, 0x312, 0xffff5cc0, 0x0, 0x1f, 0x1, 0x9e, 0x94e4, 0x2, 0x9, 0xfffffff7, 0x1, 0x800, 0x3, 0x2, 0x0, 0x401, 0x6, 0x3]}, 0x45c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @loopback}, @private=0xa010102, 0xa, 0x9}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000580)={@none, 0x7}) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x501842, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x82000) close$fd_v4l2_buffer(r0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x17, 0x0, 0xff, 0x3d, 0x1, &(0x7f0000000040)="c291daf4ff99dfacbb0cbf614e0efe631131373569d65b8a7c95ffb3c1a048855369cb0f578193a3e41c7f6686b9d5988fb583f51abb09de42d7e3fcb8"}) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7fff, 0x200, 0x40, 0x4}, 0x29, [0x7, 0x5, 0x31, 0x1, 0x7fffffff, 0xb3, 0x1bfa, 0xfffffffb, 0x80000001, 0x0, 0x2, 0x1, 0x40, 0x81, 0x8, 0x3ff, 0xfa, 0x1, 0x1, 0x40, 0x7, 0xee2, 0x1, 0x5, 0x2, 0x40, 0x81, 0x0, 0x8, 0x1f, 0x4, 0xf6, 0xff9a, 0x7, 0x1, 0x2, 0x6, 0x3, 0x1, 0xfffffffc, 0xbc, 0x61, 0x3, 0x0, 0x7db4, 0x0, 0xa14, 0x4ee, 0x5, 0x3, 0x47533ef8, 0xa386, 0x19f00000, 0x10001, 0x4, 0x0, 0x7fff, 0x3ff, 0x6, 0x8000, 0x4, 0x6, 0x8], [0xa07, 0x7, 0x4, 0x0, 0x3, 0x20, 0x40, 0x1000, 0x1, 0x1, 0x0, 0x8000, 0x44b3, 0xd3, 0x1228, 0x5, 0x8, 0x5, 0x3, 0xea30, 0x7, 0x1, 0x1cc, 0x2, 0x0, 0x8, 0x4, 0x8, 0x4, 0x101, 0x7, 0x0, 0x8, 0x38d0, 0x8, 0x1f, 0xa5c, 0x1, 0x1, 0x92, 0x3b9e, 0x5, 0xd7, 0x4, 0x7, 0x6, 0x9, 0x0, 0x7, 0x8000, 0x4, 0x3c2a, 0x4, 0x0, 0x4, 0x7fff, 0x8, 0x5, 0x1908, 0x3, 0x8, 0x2, 0x7fff, 0x80000000], [0x9f, 0x7cf4, 0x400, 0xe787, 0xc00000, 0x0, 0x8, 0x1b, 0x4, 0x1ff, 0x5eea, 0x8, 0x0, 0xe8, 0x4, 0xbc0d, 0x8, 0xffffffda, 0xfffffffd, 0x36, 0x1, 0xe7, 0x756, 0x5, 0x101, 0x7, 0x8, 0x9, 0x66e, 0x8, 0x7, 0x11e5, 0x80000001, 0x9, 0x1, 0x2, 0x6, 0x7, 0x8, 0xfffffffa, 0x7fffffff, 0x69d, 0x7e, 0x5, 0x466, 0x7, 0x2f504302, 0x7fffffff, 0x32, 0x5, 0x2, 0x7f, 0x400, 0x8, 0xf8, 0x9, 0x7fffffff, 0x4, 0x0, 0x3, 0x800, 0x4, 0x6, 0xffffffa9], [0x8, 0x4, 0x3, 0x5, 0x5, 0x2, 0xda25, 0x1000, 0x80000000, 0x1f, 0x80000001, 0x1e, 0x3, 0x2, 0x33a, 0x8, 0xc16, 0x2, 0x3, 0x1, 0x7, 0x8, 0x1c, 0x72f, 0x1, 0x9, 0x1, 0x140000, 0x0, 0xda, 0x5f601e9d, 0x6, 0xe15, 0x10001, 0x1, 0x1000, 0x101, 0x8, 0x81, 0xffffffe1, 0x4, 0x5, 0xffffffff, 0xdf, 0x0, 0x4b, 0x312, 0xffff5cc0, 0x0, 0x1f, 0x1, 0x9e, 0x94e4, 0x2, 0x9, 0xfffffff7, 0x1, 0x800, 0x3, 0x2, 0x0, 0x401, 0x6, 0x3]}, 0x45c) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @loopback}, @private=0xa010102, 0xa, 0x9}}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000580)={@none, 0x7}) (async) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x1f, 0x18, [0x3, 0x5, 0xc221, 0x1ff, 0x7fffffff, 0x9]}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x8, 0x10, 0x1000, 0xfffffff8, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x5, 0x40, 0x2f, 0x0, @multicast2, @empty, {[@noop]}}}}}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x501842, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x82000) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x501842, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x82000) (async) close$fd_v4l2_buffer(r0) (async) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x5) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="65727370616e300000000000000007007a39c7354d66004ebc75c6086fc9643087e629857eb77700800000183a4289", @ANYRES32=0x0, @ANYBLOB="0020001000000007800000014b3f002c0066000005049078ffffffffe00000028317d0ffffffffe0000001e0000002ac1414aae000000100"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00200029000000050000000046e000180068000095049078ac14143fac1e000194040100"]}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x45}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008980}, 0x4800) r5 = socket(0x10, 0x5, 0x10001) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000200)={0x8, 0x5, 0x5, 0x0, 0x816}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x501842, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x82000) (async) close$fd_v4l2_buffer(r0) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7fff, 0x200, 0x40, 0x4}, 0x29, [0x7, 0x5, 0x31, 0x1, 0x7fffffff, 0xb3, 0x1bfa, 0xfffffffb, 0x80000001, 0x0, 0x2, 0x1, 0x40, 0x81, 0x8, 0x3ff, 0xfa, 0x1, 0x1, 0x40, 0x7, 0xee2, 0x1, 0x5, 0x2, 0x40, 0x81, 0x0, 0x8, 0x1f, 0x4, 0xf6, 0xff9a, 0x7, 0x1, 0x2, 0x6, 0x3, 0x1, 0xfffffffc, 0xbc, 0x61, 0x3, 0x0, 0x7db4, 0x0, 0xa14, 0x4ee, 0x5, 0x3, 0x47533ef8, 0xa386, 0x19f00000, 0x10001, 0x4, 0x0, 0x7fff, 0x3ff, 0x6, 0x8000, 0x4, 0x6, 0x8], [0xa07, 0x7, 0x4, 0x0, 0x3, 0x20, 0x40, 0x1000, 0x1, 0x1, 0x0, 0x8000, 0x44b3, 0xd3, 0x1228, 0x5, 0x8, 0x5, 0x3, 0xea30, 0x7, 0x1, 0x1cc, 0x2, 0x0, 0x8, 0x4, 0x8, 0x4, 0x101, 0x7, 0x0, 0x8, 0x38d0, 0x8, 0x1f, 0xa5c, 0x1, 0x1, 0x92, 0x3b9e, 0x5, 0xd7, 0x4, 0x7, 0x6, 0x9, 0x0, 0x7, 0x8000, 0x4, 0x3c2a, 0x4, 0x0, 0x4, 0x7fff, 0x8, 0x5, 0x1908, 0x3, 0x8, 0x2, 0x7fff, 0x80000000], [0x9f, 0x7cf4, 0x400, 0xe787, 0xc00000, 0x0, 0x8, 0x1b, 0x4, 0x1ff, 0x5eea, 0x8, 0x0, 0xe8, 0x4, 0xbc0d, 0x8, 0xffffffda, 0xfffffffd, 0x36, 0x1, 0xe7, 0x756, 0x5, 0x101, 0x7, 0x8, 0x9, 0x66e, 0x8, 0x7, 0x11e5, 0x80000001, 0x9, 0x1, 0x2, 0x6, 0x7, 0x8, 0xfffffffa, 0x7fffffff, 0x69d, 0x7e, 0x5, 0x466, 0x7, 0x2f504302, 0x7fffffff, 0x32, 0x5, 0x2, 0x7f, 0x400, 0x8, 0xf8, 0x9, 0x7fffffff, 0x4, 0x0, 0x3, 0x800, 0x4, 0x6, 0xffffffa9], [0x8, 0x4, 0x3, 0x5, 0x5, 0x2, 0xda25, 0x1000, 0x80000000, 0x1f, 0x80000001, 0x1e, 0x3, 0x2, 0x33a, 0x8, 0xc16, 0x2, 0x3, 0x1, 0x7, 0x8, 0x1c, 0x72f, 0x1, 0x9, 0x1, 0x140000, 0x0, 0xda, 0x5f601e9d, 0x6, 0xe15, 0x10001, 0x1, 0x1000, 0x101, 0x8, 0x81, 0xffffffe1, 0x4, 0x5, 0xffffffff, 0xdf, 0x0, 0x4b, 0x312, 0xffff5cc0, 0x0, 0x1f, 0x1, 0x9e, 0x94e4, 0x2, 0x9, 0xfffffff7, 0x1, 0x800, 0x3, 0x2, 0x0, 0x401, 0x6, 0x3]}, 0x45c) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @loopback}, @private=0xa010102, 0xa, 0x9}}) (rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000580)={@none, 0x7}) (async) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:26 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x5) (async) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x2}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="65727370616e300000000000000007007a39c7354d66004ebc75c6086fc9643087e629857eb77700800000183a4289", @ANYRES32=0x0, @ANYBLOB="0020001000000007800000014b3f002c0066000005049078ffffffffe00000028317d0ffffffffe0000001e0000002ac1414aae000000100"]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00200029000000050000000046e000180068000095049078ac14143fac1e000194040100"]}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x45}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008980}, 0x4800) r5 = socket(0x10, 0x5, 0x10001) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000200)={0x8, 0x5, 0x5, 0x0, 0x816}) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0)="3417cc795ecc", &(0x7f0000000300)=@udp=r3, 0x4}, 0x20) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@dev}, {@multicast2}, {@private}, {@multicast1}, {}, {@multicast1}, {}, {@loopback}, {}]}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x884}, 0x1) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x8) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x5) (async, rerun: 32) socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="65727370616e300000000000000007007a39c7354d66004ebc75c6086fc9643087e629857eb77700800000183a4289", @ANYRES32=0x0, @ANYBLOB="0020001000000007800000014b3f002c0066000005049078ffffffffe00000028317d0ffffffffe0000001e0000002ac1414aae000000100"]}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00200029000000050000000046e000180068000095049078ac14143fac1e000194040100"]}) (async, rerun: 32) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x45}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008980}, 0x4800) r5 = socket(0x10, 0x5, 0x10001) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async, rerun: 32) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000200)={0x8, 0x5, 0x5, 0x0, 0x816}) (rerun: 32) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0)="3417cc795ecc", &(0x7f0000000300)=@udp=r3, 0x4}, 0x20) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@dev}, {@multicast2}, {@private}, {@multicast1}, {}, {@multicast1}, {}, {@loopback}, {}]}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0)="3417cc795ecc", &(0x7f0000000300)=@udp=r3, 0x4}, 0x20) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@dev}, {@multicast2}, {@private}, {@multicast1}, {}, {@multicast1}, {}, {@loopback}, {}]}}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) close$fd_v4l2_buffer(r0) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x884}, 0x1) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x8) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0)="3417cc795ecc", &(0x7f0000000300)=@udp=r3, 0x4}, 0x20) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={@local, 0x0, 0x0, 0x90, 0x0, [{@dev}, {@multicast2}, {@private}, {@multicast1}, {}, {@multicast1}, {}, {@loopback}, {}]}}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x884}, 0x1) (async, rerun: 64) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x8) 07:02:26 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) (async) 07:02:26 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) (async, rerun: 32) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0)=0x9, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@local}]}}) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2280) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x1c1081) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000240)=0x800, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0xd23, 0x2, "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"}) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) (async) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0)=0x9, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@local}]}}) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x30000000}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10000, 0x400442) read$usbfs(r1, &(0x7f0000000080)=""/29, 0x1d) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendto$phonet(r3, &(0x7f0000000200)="168dec1ce778b2e162962e9f44982da1f9712c83c2c5277cc16c8fbc5631a7b6dbb88d03402436b956531d771aece03c5b2cc7888f32d77107af4a0bff9a417ae180fac080badc96be324a95e9ea3aef54f69eb25078fff959062c2531457ca82ed04dac4b91f060e945f97844452ec30e1cef932ea6a1f6e9240bf3d7d02251cbfa514ff172fc3052c782afe5252f96559813d4bdc66f311c0fbcea71acf7d45f6636f6", 0xa4, 0x0, &(0x7f00000002c0)={0x23, 0x8, 0x0, 0xa3}, 0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x1e) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)=0xffffffff) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x30000000}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10000, 0x400442) read$usbfs(r1, &(0x7f0000000080)=""/29, 0x1d) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendto$phonet(r3, &(0x7f0000000200)="168dec1ce778b2e162962e9f44982da1f9712c83c2c5277cc16c8fbc5631a7b6dbb88d03402436b956531d771aece03c5b2cc7888f32d77107af4a0bff9a417ae180fac080badc96be324a95e9ea3aef54f69eb25078fff959062c2531457ca82ed04dac4b91f060e945f97844452ec30e1cef932ea6a1f6e9240bf3d7d02251cbfa514ff172fc3052c782afe5252f96559813d4bdc66f311c0fbcea71acf7d45f6636f6", 0xa4, 0x0, &(0x7f00000002c0)={0x23, 0x8, 0x0, 0xa3}, 0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x1e) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)=0xffffffff) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x30000000}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x10000, 0x400442) (async) read$usbfs(r1, &(0x7f0000000080)=""/29, 0x1d) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) sendto$phonet(r3, &(0x7f0000000200)="168dec1ce778b2e162962e9f44982da1f9712c83c2c5277cc16c8fbc5631a7b6dbb88d03402436b956531d771aece03c5b2cc7888f32d77107af4a0bff9a417ae180fac080badc96be324a95e9ea3aef54f69eb25078fff959062c2531457ca82ed04dac4b91f060e945f97844452ec30e1cef932ea6a1f6e9240bf3d7d02251cbfa514ff172fc3052c782afe5252f96559813d4bdc66f311c0fbcea71acf7d45f6636f6", 0xa4, 0x0, &(0x7f00000002c0)={0x23, 0x8, 0x0, 0xa3}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) (async) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x1e) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)=0xffffffff) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) (async) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2280) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x1c1081) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000240)=0x800, 0x4) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0xd23, 0x2, "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"}) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0)=0x9, 0x4) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@local}]}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0)=0x9, 0x4) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@local}]}}) (async) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket(0xd, 0x0, 0x7f) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0xa0, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xc, 0xfff2}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x40, 0xc000, 0x0, 0x400, 0x8, 0x1}}, {0x6, 0x2, [0x8fc]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3, 0x7ff, 0x1, 0x0, 0x2, 0x6}}, {0x10, 0x2, [0xff91, 0x6, 0x6, 0x9, 0x3, 0x6]}}, {{0x1c, 0x1, {0x3f, 0x80, 0x7, 0x0, 0x2, 0x101, 0x3}}, {0x4}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x30000000}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10000, 0x400442) read$usbfs(r1, &(0x7f0000000080)=""/29, 0x1d) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendto$phonet(r3, &(0x7f0000000200)="168dec1ce778b2e162962e9f44982da1f9712c83c2c5277cc16c8fbc5631a7b6dbb88d03402436b956531d771aece03c5b2cc7888f32d77107af4a0bff9a417ae180fac080badc96be324a95e9ea3aef54f69eb25078fff959062c2531457ca82ed04dac4b91f060e945f97844452ec30e1cef932ea6a1f6e9240bf3d7d02251cbfa514ff172fc3052c782afe5252f96559813d4bdc66f311c0fbcea71acf7d45f6636f6", 0xa4, 0x0, &(0x7f00000002c0)={0x23, 0x8, 0x0, 0xa3}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) (async) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'veth1_to_hsr\x00'}}, 0x1e) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)=0xffffffff) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x2e0d67ee98863842, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4801d) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2280) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x1c1081) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000240)=0x800, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0xd23, 0x2, "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"}) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2280) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x1c1081) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000240)=0x800, 0x4) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0xd23, 0x2, "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"}) (async) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async, rerun: 64) r1 = socket(0xd, 0x0, 0x7f) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0xa0, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xc, 0xfff2}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x40, 0xc000, 0x0, 0x400, 0x8, 0x1}}, {0x6, 0x2, [0x8fc]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3, 0x7ff, 0x1, 0x0, 0x2, 0x6}}, {0x10, 0x2, [0xff91, 0x6, 0x6, 0x9, 0x3, 0x6]}}, {{0x1c, 0x1, {0x3f, 0x80, 0x7, 0x0, 0x2, 0x101, 0x3}}, {0x4}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x3b, 0x4, 0x0, 0x19, 0xec, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x5, 0x3, 0x9, [{@remote, 0x8d6}, {@remote, 0x6}, {@multicast1, 0x10000}, {@remote, 0xd5}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x7ff}]}, @lsrr={0x83, 0xf, 0xf4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x8, [{@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0x9, [{@empty}, {@remote, 0x6}, {@private=0xa010100, 0x80000000}, {@local, 0x5}, {@private=0xa010101, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0x1, [{@empty, 0x2cc8}, {@remote, 0x41f}, {@local, 0x910}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x2, [0x7fffffff, 0xfff]}]}}}}}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) recvfrom$phonet(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x10000, &(0x7f0000000240)={0x23, 0x5, 0x5, 0x3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x2e0d67ee98863842, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4801d) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4c300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf2506c9bc48bf744621dd533fe7d4000000050013003f00000005000500002a11e918b975cbfd15429a44a191000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x200, 0x8070bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'nicvf0\x00'}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000440)={0x1ff, 0x7a, 0x8d01, 0x5, 0x2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4c300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf2506c9bc48bf744621dd533fe7d4000000050013003f00000005000500002a11e918b975cbfd15429a44a191000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4c300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf2506c9bc48bf744621dd533fe7d4000000050013003f00000005000500002a11e918b975cbfd15429a44a191000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) (async) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x3b, 0x4, 0x0, 0x19, 0xec, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x5, 0x3, 0x9, [{@remote, 0x8d6}, {@remote, 0x6}, {@multicast1, 0x10000}, {@remote, 0xd5}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x7ff}]}, @lsrr={0x83, 0xf, 0xf4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x8, [{@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0x9, [{@empty}, {@remote, 0x6}, {@private=0xa010100, 0x80000000}, {@local, 0x5}, {@private=0xa010101, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0x1, [{@empty, 0x2cc8}, {@remote, 0x41f}, {@local, 0x910}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x2, [0x7fffffff, 0xfff]}]}}}}}) (async) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) recvfrom$phonet(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x10000, &(0x7f0000000240)={0x23, 0x5, 0x5, 0x3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket(0xd, 0x0, 0x7f) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0xa0, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xc, 0xfff2}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x40, 0xc000, 0x0, 0x400, 0x8, 0x1}}, {0x6, 0x2, [0x8fc]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3, 0x7ff, 0x1, 0x0, 0x2, 0x6}}, {0x10, 0x2, [0xff91, 0x6, 0x6, 0x9, 0x3, 0x6]}}, {{0x1c, 0x1, {0x3f, 0x80, 0x7, 0x0, 0x2, 0x101, 0x3}}, {0x4}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) socket(0xd, 0x0, 0x7f) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0xa0, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xc, 0xfff2}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x40, 0xc000, 0x0, 0x400, 0x8, 0x1}}, {0x6, 0x2, [0x8fc]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3, 0x7ff, 0x1, 0x0, 0x2, 0x6}}, {0x10, 0x2, [0xff91, 0x6, 0x6, 0x9, 0x3, 0x6]}}, {{0x1c, 0x1, {0x3f, 0x80, 0x7, 0x0, 0x2, 0x101, 0x3}}, {0x4}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x3b, 0x4, 0x0, 0x19, 0xec, 0x65, 0x0, 0x40, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x5, 0x3, 0x9, [{@remote, 0x8d6}, {@remote, 0x6}, {@multicast1, 0x10000}, {@remote, 0xd5}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x7ff}]}, @lsrr={0x83, 0xf, 0xf4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf8, 0x3, 0x8, [{@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0x9, [{@empty}, {@remote, 0x6}, {@private=0xa010100, 0x80000000}, {@local, 0x5}, {@private=0xa010101, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0x1, [{@empty, 0x2cc8}, {@remote, 0x41f}, {@local, 0x910}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x2, [0x7fffffff, 0xfff]}]}}}}}) (async) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) recvfrom$phonet(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x10000, &(0x7f0000000240)={0x23, 0x5, 0x5, 0x3}, 0x10) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4c300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf2506c9bc48bf744621dd533fe7d4000000050013003f00000005000500002a11e918b975cbfd15429a44a191000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x8000) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x2e0d67ee98863842, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xbb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4801d) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x200, 0x8070bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'nicvf0\x00'}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000440)={0x1ff, 0x7a, 0x8d01, 0x5, 0x2}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x101301) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x1bacf914c1bad62, &(0x7f0000000080)=[{@none}, {@fixed}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)="12f2be3b5bc39210b2a8105524a80b0813ec50eeac646328833769036e6278acaef08257b07d2888cc2f5c2e050db9d8972ec676b3b49618e9357a98653901c368427628423c54dcff070c8ff74276d113585b37373f98ce322e2998f84edce4eb588ccbc8ffd1a9e32d99b298650983c777eb909eaab11307e04b56136bdda6b6f4a24e289bf6ebd57e10745a5d3415fd3b5c390cc13ec7468acd20e4a60a7127e0356d0c418c5d61e70ab6a1499fd97499a99c7cd9325f59083e5cf8f9a58df6552424a2a83c90ae00243f120636593ffe5670ff41365d5844ef13176bdbd6e56e40dcde1468d942b60ad66c5751cb"}) close$fd_v4l2_buffer(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x58d800, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000280)={0x34c41e10, 0xc, [0x0, 0x101, 0x40]}) 07:02:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0xd8a6b077da382256, 0x7f, 0x7fffffff, '\x00', 0x3}, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x5, 0x2, 'syz0\x00', &(0x7f0000000000)=['\x00', '],)\x84#((\x00', '\xf2\x00', '\x00', '!\xf2-\x00'], 0x10}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x9}, 0x14}}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x1, 0x0, 0x40, 0x0, [{@dev}, {}, {@initdev}, {@private}]}}) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x200, 0x8070bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'nicvf0\x00'}) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) (async, rerun: 32) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000440)={0x1ff, 0x7a, 0x8d01, 0x5, 0x2}) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0xd8a6b077da382256, 0x7f, 0x7fffffff, '\x00', 0x3}, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x5, 0x2, 'syz0\x00', &(0x7f0000000000)=['\x00', '],)\x84#((\x00', '\xf2\x00', '\x00', '!\xf2-\x00'], 0x10}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x9}, 0x14}}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x1, 0x0, 0x40, 0x0, [{@dev}, {}, {@initdev}, {@private}]}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0xd8a6b077da382256, 0x7f, 0x7fffffff, '\x00', 0x3}, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x5, 0x2, 'syz0\x00', &(0x7f0000000000)=['\x00', '],)\x84#((\x00', '\xf2\x00', '\x00', '!\xf2-\x00'], 0x10}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x9}, 0x14}}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x1, 0x0, 0x40, 0x0, [{@dev}, {}, {@initdev}, {@private}]}}) (async) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x101301) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x1bacf914c1bad62, &(0x7f0000000080)=[{@none}, {@fixed}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)="12f2be3b5bc39210b2a8105524a80b0813ec50eeac646328833769036e6278acaef08257b07d2888cc2f5c2e050db9d8972ec676b3b49618e9357a98653901c368427628423c54dcff070c8ff74276d113585b37373f98ce322e2998f84edce4eb588ccbc8ffd1a9e32d99b298650983c777eb909eaab11307e04b56136bdda6b6f4a24e289bf6ebd57e10745a5d3415fd3b5c390cc13ec7468acd20e4a60a7127e0356d0c418c5d61e70ab6a1499fd97499a99c7cd9325f59083e5cf8f9a58df6552424a2a83c90ae00243f120636593ffe5670ff41365d5844ef13176bdbd6e56e40dcde1468d942b60ad66c5751cb"}) close$fd_v4l2_buffer(r0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x58d800, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000280)={0x34c41e10, 0xc, [0x0, 0x101, 0x40]}) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x101301) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x1bacf914c1bad62, &(0x7f0000000080)=[{@none}, {@fixed}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)="12f2be3b5bc39210b2a8105524a80b0813ec50eeac646328833769036e6278acaef08257b07d2888cc2f5c2e050db9d8972ec676b3b49618e9357a98653901c368427628423c54dcff070c8ff74276d113585b37373f98ce322e2998f84edce4eb588ccbc8ffd1a9e32d99b298650983c777eb909eaab11307e04b56136bdda6b6f4a24e289bf6ebd57e10745a5d3415fd3b5c390cc13ec7468acd20e4a60a7127e0356d0c418c5d61e70ab6a1499fd97499a99c7cd9325f59083e5cf8f9a58df6552424a2a83c90ae00243f120636593ffe5670ff41365d5844ef13176bdbd6e56e40dcde1468d942b60ad66c5751cb"}) (rerun: 32) close$fd_v4l2_buffer(r0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x58d800, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000280)={0x34c41e10, 0xc, [0x0, 0x101, 0x40]}) 07:02:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0xd8a6b077da382256, 0x7f, 0x7fffffff, '\x00', 0x3}, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x5, 0x2, 'syz0\x00', &(0x7f0000000000)=['\x00', '],)\x84#((\x00', '\xf2\x00', '\x00', '!\xf2-\x00'], 0x10}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x9}, 0x14}}, 0x0) (async, rerun: 64) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x1, 0x0, 0x40, 0x0, [{@dev}, {}, {@initdev}, {@private}]}}) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x309e01, 0x0) close$fd_v4l2_buffer(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x73b, 0x200000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/246) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x309e01, 0x0) close$fd_v4l2_buffer(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x73b, 0x200000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/246) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x309e01, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) syz_open_dev$dri(&(0x7f0000000000), 0x73b, 0x200000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/246) (async) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9c, 0xc, 0x4, 0x2000, 0x40, {}, {0x3, 0x0, 0xf6, 0x3f, 0x4, 0x2, "323662ff"}, 0x2, 0x4, {}, 0x5, 0x0, r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) syz_open_dev$usbfs(&(0x7f0000000100), 0xaca, 0x280100) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x47ff, 0xfefffff9}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000000c0)={0xf, 0xffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x81, 0x0, 0x1, 0x80000001, '\x00', '\x00', '\x00', 0x8000, 0x100, 0x5, 0x101, "6925c5fca5f653112274b3e3b16a4e5d"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x81, 0x0, 0x1, 0x80000001, '\x00', '\x00', '\x00', 0x8000, 0x100, 0x5, 0x101, "6925c5fca5f653112274b3e3b16a4e5d"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) close$fd_v4l2_buffer(r0) (rerun: 64) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9c, 0xc, 0x4, 0x2000, 0x40, {}, {0x3, 0x0, 0xf6, 0x3f, 0x4, 0x2, "323662ff"}, 0x2, 0x4, {}, 0x5, 0x0, r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (rerun: 64) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x309e01, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x73b, 0x200000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/246) 07:02:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9c, 0xc, 0x4, 0x2000, 0x40, {}, {0x3, 0x0, 0xf6, 0x3f, 0x4, 0x2, "323662ff"}, 0x2, 0x4, {}, 0x5, 0x0, r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1c, 0x10}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0000, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000700)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x18, 0x69, 0x10, 0x70bd26, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x7, 0x5, 0x7, {{0x1c, 0x4, 0x2, 0x1b, 0x70, 0x68, 0x0, 0x33, 0x0, 0x0, @loopback, @loopback, {[@end, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x3, "8b"}, {0x7, 0x11, "46f170f27da8a9182bda577971c187"}, {0x3, 0x9, "01459782bd144f"}, {0x5, 0x7, "c972ccf5ee"}, {0x4, 0xf, "f80c16f43c053e3a090e8e22c8"}]}, @generic={0x89, 0xb, "928d1bccfa68939097"}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x0, [{@multicast2, 0xfff}, {@multicast1, 0x6c}]}]}}}}}) 07:02:27 executing program 1: socket(0x25, 0x5, 0x620) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x9c, 0xc, 0x4, 0x2000, 0x40, {}, {0x3, 0x0, 0xf6, 0x3f, 0x4, 0x2, "323662ff"}, 0x2, 0x4, {}, 0x5, 0x0, r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x81, 0x0, 0x1, 0x80000001, '\x00', '\x00', '\x00', 0x8000, 0x100, 0x5, 0x101, "6925c5fca5f653112274b3e3b16a4e5d"}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x248, 0x31, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ffc0}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10005}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd8a}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x838}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9196}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1fd}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4c811}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe3, 0xa8, @random="2f2f40d2e6c8f061960f0660378e305473bc37f4300bfd38f94d1bbda3937cd53e8812c60b79ad01c58771be2e47d7e412154e3e8dc27cd358c7f5bd46c8fd407024856ce5cade39a4b3f70cdc4ebf58030020e2a075c14f2038bad976e9e0f6c904be4c17d432e609f4d24d27315618ff30e8e5bfc022c45adf11debbf486f7c72a4af8028f8fa567a7b27972c3f5edfcf38b7b85f1361963815163d6e33f1d396e2800feb3b3882fc9f8a525b42c191210371c503be5d2a16aa6ddb274e7cf14b01e20cd66e3ffb84b4caa2960debbb64c4bfecbcd41ca8818addfccf15a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x6040090}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000000)) 07:02:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1c, 0x10}}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0000, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async, rerun: 32) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000700)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x18, 0x69, 0x10, 0x70bd26, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x7, 0x5, 0x7, {{0x1c, 0x4, 0x2, 0x1b, 0x70, 0x68, 0x0, 0x33, 0x0, 0x0, @loopback, @loopback, {[@end, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x3, "8b"}, {0x7, 0x11, "46f170f27da8a9182bda577971c187"}, {0x3, 0x9, "01459782bd144f"}, {0x5, 0x7, "c972ccf5ee"}, {0x4, 0xf, "f80c16f43c053e3a090e8e22c8"}]}, @generic={0x89, 0xb, "928d1bccfa68939097"}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x0, [{@multicast2, 0xfff}, {@multicast1, 0x6c}]}]}}}}}) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x7, 0x7, 0xfffb, 0x3}, 0x6, [0x2b7a, 0x6, 0x9, 0x7fff, 0x2, 0x380, 0xc4e, 0x3, 0x3, 0x5, 0x4, 0xf14, 0x4, 0x0, 0x5, 0x8000, 0x59, 0xf1, 0x800, 0x3ff, 0xffffffff, 0x7f, 0x100, 0x100, 0x5aa, 0x0, 0x6, 0xffffffff, 0x80, 0x8000, 0x24c, 0xf2, 0x10000, 0x1, 0x7f, 0x81, 0x8, 0x8001, 0x9, 0xea0000, 0x3, 0x40, 0x6, 0x8, 0x7, 0x1, 0x0, 0x3, 0x81, 0x40, 0x8c1, 0x0, 0x8, 0xfb85, 0x1, 0x4, 0x7fffffff, 0x8, 0x65d6c400, 0x9, 0x6, 0x2, 0x4, 0x200], [0xf5e0, 0x200, 0x0, 0x200, 0x10001, 0x6, 0x9, 0x8000, 0xac, 0x5, 0x401, 0xffffffff, 0xfffffff7, 0x7, 0x0, 0x4, 0x40, 0x4, 0x8, 0x1, 0x778, 0x400, 0x6, 0x7, 0x0, 0x7, 0xff, 0x4, 0x401, 0x7, 0x7d, 0x3, 0x80, 0x7, 0xaa, 0xdb, 0x1ff, 0x0, 0x1, 0x7ff, 0xf8ef, 0x8, 0x40, 0x7fff, 0x401, 0x5, 0x80000001, 0x20, 0x8, 0xa29b, 0x4d, 0x6, 0x8000, 0x10001, 0xfffffffa, 0x1000, 0x2, 0x7, 0x1ddd8f29, 0xee000000, 0x4, 0x8, 0xb920, 0x2], [0x30e, 0xffffff80, 0x2, 0xff, 0x80, 0x3, 0xfffffffe, 0x0, 0x8001, 0x2, 0xfff, 0x5, 0x8, 0x101, 0x7, 0xfffffffd, 0x9, 0x5, 0x8000, 0x9, 0xfff, 0x6, 0x9, 0x4f54, 0x1, 0x9fd, 0x7, 0x10000, 0x7fff, 0x1f, 0x7, 0x1000, 0x80000000, 0x9, 0x5, 0x6, 0x10000, 0x200, 0x7c7, 0x10000, 0x2, 0xff, 0x3ff, 0x9, 0x767f9e5e, 0x3, 0xfff, 0x5, 0x0, 0x1, 0x3, 0xfffffffb, 0x8, 0x554, 0x0, 0x7f, 0x10000, 0x6, 0x7, 0x1ff, 0x4, 0x200, 0x2, 0xc078], [0x0, 0x0, 0x8, 0x1, 0xbbb1, 0x3000, 0x3, 0x5, 0x4, 0x7fff, 0x0, 0x20, 0x8001, 0x3, 0x200, 0x5, 0x8e, 0x40, 0x7, 0x2, 0x475f8bb6, 0xa8, 0x7, 0x8, 0x2, 0xa0e0, 0x101, 0x2, 0x560df7d8, 0xff, 0x4, 0x1, 0x80000001, 0x3, 0x7, 0x3, 0x9, 0x800, 0x6, 0x5cc1, 0x6, 0x8, 0x4, 0x3, 0x80, 0x2, 0x6, 0x100, 0xffff, 0x2, 0x2, 0x8, 0x20, 0x9, 0x1, 0x5310, 0xffff0001, 0xc0c, 0x40, 0x7, 0x1400, 0x8, 0x8, 0x7]}, 0x45c) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d2b82, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ac14f2ba000000003000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000e000000100"/64]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400042) close$fd_v4l2_buffer(r0) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x248, 0x31, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ffc0}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10005}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd8a}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x838}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9196}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1fd}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4c811}, 0x10) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe3, 0xa8, @random="2f2f40d2e6c8f061960f0660378e305473bc37f4300bfd38f94d1bbda3937cd53e8812c60b79ad01c58771be2e47d7e412154e3e8dc27cd358c7f5bd46c8fd407024856ce5cade39a4b3f70cdc4ebf58030020e2a075c14f2038bad976e9e0f6c904be4c17d432e609f4d24d27315618ff30e8e5bfc022c45adf11debbf486f7c72a4af8028f8fa567a7b27972c3f5edfcf38b7b85f1361963815163d6e33f1d396e2800feb3b3882fc9f8a525b42c191210371c503be5d2a16aa6ddb274e7cf14b01e20cd66e3ffb84b4caa2960debbb64c4bfecbcd41ca8818addfccf15a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x6040090}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000000)) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d2b82, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ac14f2ba000000003000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000e000000100"/64]}) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400042) (async) close$fd_v4l2_buffer(r0) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x7, 0x7, 0xfffb, 0x3}, 0x6, [0x2b7a, 0x6, 0x9, 0x7fff, 0x2, 0x380, 0xc4e, 0x3, 0x3, 0x5, 0x4, 0xf14, 0x4, 0x0, 0x5, 0x8000, 0x59, 0xf1, 0x800, 0x3ff, 0xffffffff, 0x7f, 0x100, 0x100, 0x5aa, 0x0, 0x6, 0xffffffff, 0x80, 0x8000, 0x24c, 0xf2, 0x10000, 0x1, 0x7f, 0x81, 0x8, 0x8001, 0x9, 0xea0000, 0x3, 0x40, 0x6, 0x8, 0x7, 0x1, 0x0, 0x3, 0x81, 0x40, 0x8c1, 0x0, 0x8, 0xfb85, 0x1, 0x4, 0x7fffffff, 0x8, 0x65d6c400, 0x9, 0x6, 0x2, 0x4, 0x200], [0xf5e0, 0x200, 0x0, 0x200, 0x10001, 0x6, 0x9, 0x8000, 0xac, 0x5, 0x401, 0xffffffff, 0xfffffff7, 0x7, 0x0, 0x4, 0x40, 0x4, 0x8, 0x1, 0x778, 0x400, 0x6, 0x7, 0x0, 0x7, 0xff, 0x4, 0x401, 0x7, 0x7d, 0x3, 0x80, 0x7, 0xaa, 0xdb, 0x1ff, 0x0, 0x1, 0x7ff, 0xf8ef, 0x8, 0x40, 0x7fff, 0x401, 0x5, 0x80000001, 0x20, 0x8, 0xa29b, 0x4d, 0x6, 0x8000, 0x10001, 0xfffffffa, 0x1000, 0x2, 0x7, 0x1ddd8f29, 0xee000000, 0x4, 0x8, 0xb920, 0x2], [0x30e, 0xffffff80, 0x2, 0xff, 0x80, 0x3, 0xfffffffe, 0x0, 0x8001, 0x2, 0xfff, 0x5, 0x8, 0x101, 0x7, 0xfffffffd, 0x9, 0x5, 0x8000, 0x9, 0xfff, 0x6, 0x9, 0x4f54, 0x1, 0x9fd, 0x7, 0x10000, 0x7fff, 0x1f, 0x7, 0x1000, 0x80000000, 0x9, 0x5, 0x6, 0x10000, 0x200, 0x7c7, 0x10000, 0x2, 0xff, 0x3ff, 0x9, 0x767f9e5e, 0x3, 0xfff, 0x5, 0x0, 0x1, 0x3, 0xfffffffb, 0x8, 0x554, 0x0, 0x7f, 0x10000, 0x6, 0x7, 0x1ff, 0x4, 0x200, 0x2, 0xc078], [0x0, 0x0, 0x8, 0x1, 0xbbb1, 0x3000, 0x3, 0x5, 0x4, 0x7fff, 0x0, 0x20, 0x8001, 0x3, 0x200, 0x5, 0x8e, 0x40, 0x7, 0x2, 0x475f8bb6, 0xa8, 0x7, 0x8, 0x2, 0xa0e0, 0x101, 0x2, 0x560df7d8, 0xff, 0x4, 0x1, 0x80000001, 0x3, 0x7, 0x3, 0x9, 0x800, 0x6, 0x5cc1, 0x6, 0x8, 0x4, 0x3, 0x80, 0x2, 0x6, 0x100, 0xffff, 0x2, 0x2, 0x8, 0x20, 0x9, 0x1, 0x5310, 0xffff0001, 0xc0c, 0x40, 0x7, 0x1400, 0x8, 0x8, 0x7]}, 0x45c) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x9, 0x4, 0x81, 0x181, 'syz1\x00', 0x8}, 0x1, 0x20, 0x5, r3, 0x0, 0x8, 'syz0\x00', &(0x7f00000001c0)}) close$fd_v4l2_buffer(r0) 07:02:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1c, 0x10}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0000, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000700)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x18, 0x69, 0x10, 0x70bd26, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x7, 0x5, 0x7, {{0x1c, 0x4, 0x2, 0x1b, 0x70, 0x68, 0x0, 0x33, 0x0, 0x0, @loopback, @loopback, {[@end, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x3, "8b"}, {0x7, 0x11, "46f170f27da8a9182bda577971c187"}, {0x3, 0x9, "01459782bd144f"}, {0x5, 0x7, "c972ccf5ee"}, {0x4, 0xf, "f80c16f43c053e3a090e8e22c8"}]}, @generic={0x89, 0xb, "928d1bccfa68939097"}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x0, [{@multicast2, 0xfff}, {@multicast1, 0x6c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1c, 0x10}}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4c0000, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000700)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x18, 0x69, 0x10, 0x70bd26, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x7, 0x5, 0x7, {{0x1c, 0x4, 0x2, 0x1b, 0x70, 0x68, 0x0, 0x33, 0x0, 0x0, @loopback, @loopback, {[@end, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x6, 0x3, "8b"}, {0x7, 0x11, "46f170f27da8a9182bda577971c187"}, {0x3, 0x9, "01459782bd144f"}, {0x5, 0x7, "c972ccf5ee"}, {0x4, 0xf, "f80c16f43c053e3a090e8e22c8"}]}, @generic={0x89, 0xb, "928d1bccfa68939097"}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x0, [{@multicast2, 0xfff}, {@multicast1, 0x6c}]}]}}}}}) (async) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x248, 0x31, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ffc0}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10005}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd8a}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x838}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9196}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1fd}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4c811}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe3, 0xa8, @random="2f2f40d2e6c8f061960f0660378e305473bc37f4300bfd38f94d1bbda3937cd53e8812c60b79ad01c58771be2e47d7e412154e3e8dc27cd358c7f5bd46c8fd407024856ce5cade39a4b3f70cdc4ebf58030020e2a075c14f2038bad976e9e0f6c904be4c17d432e609f4d24d27315618ff30e8e5bfc022c45adf11debbf486f7c72a4af8028f8fa567a7b27972c3f5edfcf38b7b85f1361963815163d6e33f1d396e2800feb3b3882fc9f8a525b42c191210371c503be5d2a16aa6ddb274e7cf14b01e20cd66e3ffb84b4caa2960debbb64c4bfecbcd41ca8818addfccf15a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x6040090}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x248, 0x31, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ffc0}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10005}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd8a}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x838}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9196}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1fd}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4c811}, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x9}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe3, 0xa8, @random="2f2f40d2e6c8f061960f0660378e305473bc37f4300bfd38f94d1bbda3937cd53e8812c60b79ad01c58771be2e47d7e412154e3e8dc27cd358c7f5bd46c8fd407024856ce5cade39a4b3f70cdc4ebf58030020e2a075c14f2038bad976e9e0f6c904be4c17d432e609f4d24d27315618ff30e8e5bfc022c45adf11debbf486f7c72a4af8028f8fa567a7b27972c3f5edfcf38b7b85f1361963815163d6e33f1d396e2800feb3b3882fc9f8a525b42c191210371c503be5d2a16aa6ddb274e7cf14b01e20cd66e3ffb84b4caa2960debbb64c4bfecbcd41ca8818addfccf15a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x6040090}, 0x40) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000000)) (async) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x7, 0x7, 0xfffb, 0x3}, 0x6, [0x2b7a, 0x6, 0x9, 0x7fff, 0x2, 0x380, 0xc4e, 0x3, 0x3, 0x5, 0x4, 0xf14, 0x4, 0x0, 0x5, 0x8000, 0x59, 0xf1, 0x800, 0x3ff, 0xffffffff, 0x7f, 0x100, 0x100, 0x5aa, 0x0, 0x6, 0xffffffff, 0x80, 0x8000, 0x24c, 0xf2, 0x10000, 0x1, 0x7f, 0x81, 0x8, 0x8001, 0x9, 0xea0000, 0x3, 0x40, 0x6, 0x8, 0x7, 0x1, 0x0, 0x3, 0x81, 0x40, 0x8c1, 0x0, 0x8, 0xfb85, 0x1, 0x4, 0x7fffffff, 0x8, 0x65d6c400, 0x9, 0x6, 0x2, 0x4, 0x200], [0xf5e0, 0x200, 0x0, 0x200, 0x10001, 0x6, 0x9, 0x8000, 0xac, 0x5, 0x401, 0xffffffff, 0xfffffff7, 0x7, 0x0, 0x4, 0x40, 0x4, 0x8, 0x1, 0x778, 0x400, 0x6, 0x7, 0x0, 0x7, 0xff, 0x4, 0x401, 0x7, 0x7d, 0x3, 0x80, 0x7, 0xaa, 0xdb, 0x1ff, 0x0, 0x1, 0x7ff, 0xf8ef, 0x8, 0x40, 0x7fff, 0x401, 0x5, 0x80000001, 0x20, 0x8, 0xa29b, 0x4d, 0x6, 0x8000, 0x10001, 0xfffffffa, 0x1000, 0x2, 0x7, 0x1ddd8f29, 0xee000000, 0x4, 0x8, 0xb920, 0x2], [0x30e, 0xffffff80, 0x2, 0xff, 0x80, 0x3, 0xfffffffe, 0x0, 0x8001, 0x2, 0xfff, 0x5, 0x8, 0x101, 0x7, 0xfffffffd, 0x9, 0x5, 0x8000, 0x9, 0xfff, 0x6, 0x9, 0x4f54, 0x1, 0x9fd, 0x7, 0x10000, 0x7fff, 0x1f, 0x7, 0x1000, 0x80000000, 0x9, 0x5, 0x6, 0x10000, 0x200, 0x7c7, 0x10000, 0x2, 0xff, 0x3ff, 0x9, 0x767f9e5e, 0x3, 0xfff, 0x5, 0x0, 0x1, 0x3, 0xfffffffb, 0x8, 0x554, 0x0, 0x7f, 0x10000, 0x6, 0x7, 0x1ff, 0x4, 0x200, 0x2, 0xc078], [0x0, 0x0, 0x8, 0x1, 0xbbb1, 0x3000, 0x3, 0x5, 0x4, 0x7fff, 0x0, 0x20, 0x8001, 0x3, 0x200, 0x5, 0x8e, 0x40, 0x7, 0x2, 0x475f8bb6, 0xa8, 0x7, 0x8, 0x2, 0xa0e0, 0x101, 0x2, 0x560df7d8, 0xff, 0x4, 0x1, 0x80000001, 0x3, 0x7, 0x3, 0x9, 0x800, 0x6, 0x5cc1, 0x6, 0x8, 0x4, 0x3, 0x80, 0x2, 0x6, 0x100, 0xffff, 0x2, 0x2, 0x8, 0x20, 0x9, 0x1, 0x5310, 0xffff0001, 0xc0c, 0x40, 0x7, 0x1400, 0x8, 0x8, 0x7]}, 0x45c) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x7, 0x7, 0xfffb, 0x3}, 0x6, [0x2b7a, 0x6, 0x9, 0x7fff, 0x2, 0x380, 0xc4e, 0x3, 0x3, 0x5, 0x4, 0xf14, 0x4, 0x0, 0x5, 0x8000, 0x59, 0xf1, 0x800, 0x3ff, 0xffffffff, 0x7f, 0x100, 0x100, 0x5aa, 0x0, 0x6, 0xffffffff, 0x80, 0x8000, 0x24c, 0xf2, 0x10000, 0x1, 0x7f, 0x81, 0x8, 0x8001, 0x9, 0xea0000, 0x3, 0x40, 0x6, 0x8, 0x7, 0x1, 0x0, 0x3, 0x81, 0x40, 0x8c1, 0x0, 0x8, 0xfb85, 0x1, 0x4, 0x7fffffff, 0x8, 0x65d6c400, 0x9, 0x6, 0x2, 0x4, 0x200], [0xf5e0, 0x200, 0x0, 0x200, 0x10001, 0x6, 0x9, 0x8000, 0xac, 0x5, 0x401, 0xffffffff, 0xfffffff7, 0x7, 0x0, 0x4, 0x40, 0x4, 0x8, 0x1, 0x778, 0x400, 0x6, 0x7, 0x0, 0x7, 0xff, 0x4, 0x401, 0x7, 0x7d, 0x3, 0x80, 0x7, 0xaa, 0xdb, 0x1ff, 0x0, 0x1, 0x7ff, 0xf8ef, 0x8, 0x40, 0x7fff, 0x401, 0x5, 0x80000001, 0x20, 0x8, 0xa29b, 0x4d, 0x6, 0x8000, 0x10001, 0xfffffffa, 0x1000, 0x2, 0x7, 0x1ddd8f29, 0xee000000, 0x4, 0x8, 0xb920, 0x2], [0x30e, 0xffffff80, 0x2, 0xff, 0x80, 0x3, 0xfffffffe, 0x0, 0x8001, 0x2, 0xfff, 0x5, 0x8, 0x101, 0x7, 0xfffffffd, 0x9, 0x5, 0x8000, 0x9, 0xfff, 0x6, 0x9, 0x4f54, 0x1, 0x9fd, 0x7, 0x10000, 0x7fff, 0x1f, 0x7, 0x1000, 0x80000000, 0x9, 0x5, 0x6, 0x10000, 0x200, 0x7c7, 0x10000, 0x2, 0xff, 0x3ff, 0x9, 0x767f9e5e, 0x3, 0xfff, 0x5, 0x0, 0x1, 0x3, 0xfffffffb, 0x8, 0x554, 0x0, 0x7f, 0x10000, 0x6, 0x7, 0x1ff, 0x4, 0x200, 0x2, 0xc078], [0x0, 0x0, 0x8, 0x1, 0xbbb1, 0x3000, 0x3, 0x5, 0x4, 0x7fff, 0x0, 0x20, 0x8001, 0x3, 0x200, 0x5, 0x8e, 0x40, 0x7, 0x2, 0x475f8bb6, 0xa8, 0x7, 0x8, 0x2, 0xa0e0, 0x101, 0x2, 0x560df7d8, 0xff, 0x4, 0x1, 0x80000001, 0x3, 0x7, 0x3, 0x9, 0x800, 0x6, 0x5cc1, 0x6, 0x8, 0x4, 0x3, 0x80, 0x2, 0x6, 0x100, 0xffff, 0x2, 0x2, 0x8, 0x20, 0x9, 0x1, 0x5310, 0xffff0001, 0xc0c, 0x40, 0x7, 0x1400, 0x8, 0x8, 0x7]}, 0x45c) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) close$fd_v4l2_buffer(r0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d2b82, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ac14f2ba000000003000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000e000000100"/64]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400042) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d2b82, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ac14f2ba000000003000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000e000000100"/64]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400042) (async) close$fd_v4l2_buffer(r0) (async) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x400000, 0x341301) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) close$fd_v4l2_buffer(r0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getaddr={0x3c, 0x16, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x96, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x0, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8c4) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x2040, 0x6, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x81, "22906cac"}, 0x3, 0x4, {}, 0x0, 0x0, r2}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:27 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x400000, 0x341301) syz_open_dev$dri(&(0x7f0000000000), 0x400000, 0x341301) (async) 07:02:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500101000000090b2bbd7000fbdbdf250a000008fc00810500020000082206000600000008000400", @ANYRES32=0x0, @ANYBLOB="070008806feeb7000c00090002000005", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) close$fd_v4l2_buffer(r0) 07:02:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x40}}, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getaddr={0x3c, 0x16, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x96, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x0, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8c4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getaddr={0x3c, 0x16, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x96, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x0, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8c4) (async) 07:02:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x2040, 0x6, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x81, "22906cac"}, 0x3, 0x4, {}, 0x0, 0x0, r2}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x2040, 0x6, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x81, "22906cac"}, 0x3, 0x4, {}, 0x0, 0x0, r2}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x400000, 0x341301) syz_open_dev$dri(&(0x7f0000000000), 0x400000, 0x341301) (async) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000e80)={{0x6, 0x5, 0x7ff, 0x7f, 'syz0\x00', 0xffff0001}, 0x1, [0x8, 0x3, 0x0, 0x200, 0x2, 0x8000000000000001, 0x7, 0xf7f6, 0x299, 0x7f, 0x5, 0x8000000000, 0x5, 0x0, 0x231d319d, 0x0, 0x9, 0x1000, 0x2, 0x3, 0xa6d, 0x1ff, 0xa3b6, 0x9, 0x4f, 0x7fffffff, 0x3, 0x1, 0x81, 0x4, 0x7, 0xad, 0x3, 0xff, 0x9cb, 0x3, 0x1000, 0x10000, 0x1ff, 0xe9, 0x100000000, 0xb3f, 0x77e7, 0x9, 0x0, 0x3, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x9, 0x3, 0xffffffffffffff00, 0x92, 0x6, 0x8, 0x1, 0x1ff, 0x7f, 0x7, 0x5, 0x5, 0x8000, 0x0, 0x2, 0x0, 0x20004000000000, 0x5, 0x758, 0x7, 0x8000000000000001, 0x6, 0x0, 0x40, 0x1, 0x800, 0x8, 0x5, 0x5, 0x0, 0xfaa8, 0x20000, 0xdd, 0x7, 0x3, 0x6, 0x9, 0x65, 0x3, 0x3, 0x100000001, 0x8128, 0x7fff, 0x9, 0xb, 0x5, 0x400000000000000, 0x7, 0x89, 0x1, 0x3f, 0x0, 0x800, 0x1d02, 0x6, 0x8000000000000000, 0x7, 0x10000, 0x5, 0x8000, 0x6, 0x7, 0xb, 0x800, 0x7, 0x4, 0x4, 0x95f, 0xfff, 0x7, 0x1, 0x4, 0x5, 0x400, 0x7, 0x8000000000000001, 0x2]}) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x274b00) r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x6, 0x4, {0x0, 0x9, 0x20, {0x6, 0x9}, {0x9, 0x8}, @cond=[{0x0, 0x26a, 0xff, 0x1, 0x7, 0xff}, {0x95d, 0x1, 0x7ff, 0x1000, 0x3, 0x3}]}, {0x54, 0x5, 0x0, {0x87, 0xff}, {0x2000, 0x9}, @rumble={0x7ff, 0xfeff}}}) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)=0x5) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x40}}, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x40}}, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x2, 0x5, 0x4, 0x2040, 0x6, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x81, "22906cac"}, 0x3, 0x4, {}, 0x0, 0x0, r2}) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getaddr={0x3c, 0x16, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x96, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff, 0x0, 0x7}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8c4) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x40}}, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) close$fd_v4l2_buffer(r0) (rerun: 64) 07:02:28 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x274b00) (async) r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x6, 0x4, {0x0, 0x9, 0x20, {0x6, 0x9}, {0x9, 0x8}, @cond=[{0x0, 0x26a, 0xff, 0x1, 0x7, 0xff}, {0x95d, 0x1, 0x7ff, 0x1000, 0x3, 0x3}]}, {0x54, 0x5, 0x0, {0x87, 0xff}, {0x2000, 0x9}, @rumble={0x7ff, 0xfeff}}}) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)=0x5) 07:02:28 executing program 2: socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x274b00) (async) r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x6, 0x4, {0x0, 0x9, 0x20, {0x6, 0x9}, {0x9, 0x8}, @cond=[{0x0, 0x26a, 0xff, 0x1, 0x7, 0xff}, {0x95d, 0x1, 0x7ff, 0x1000, 0x3, 0x3}]}, {0x54, 0x5, 0x0, {0x87, 0xff}, {0x2000, 0x9}, @rumble={0x7ff, 0xfeff}}}) (async, rerun: 32) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)=0x5) (rerun: 32) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_DEV_DESTROY(r1, 0x5502) close$fd_v4l2_buffer(r0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/235) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x800, 0x70bd23, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000814) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000480)=0x1) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000003c0)=0x1800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$UI_DEV_DESTROY(r1, 0x5502) (async) close$fd_v4l2_buffer(r0) (async) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/235) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x800, 0x70bd23, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000814) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000480)=0x1) (async) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000003c0)=0x1800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x800, 0x9, {r2, r3/1000+10000}, {0x77359400}, {0x3, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "bfc40930996707e6c6a06610733f92ad3068795b6f71455f94e5c02b28855669d0033d34325e610177aa8f71e159801fda9e5c72884545cb5e9c182c39ca7b31"}}, 0x80}, 0x1, 0x0, 0x0, 0x40081}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x480042) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x2, 0x6, 0x40, '\x00', 0x7f}, 0x3, 0x10, 0x1, r1, 0x4, 0x80000001, 'syz1\x00', &(0x7f0000000100)=['/[%\x00', 'devlink\x00', 'devlink\x00', '/dev/nvram\x00'], 0x1f}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x64202) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x8, 0x800, {{0x21, 0x4, 0x3, 0x2e, 0x84, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xe, "f989459b7e473660308657d7"}, {0x1, 0x6, "7e2e31e8"}]}, @timestamp={0x44, 0x14, 0x62, 0x0, 0x8, [0x94, 0x7, 0x7ff, 0x4]}, @timestamp={0x44, 0x14, 0x2d, 0x0, 0xd, [0x8, 0x20, 0x20, 0x4]}, @generic={0x94, 0xa, "85f839e2750f4944"}, @noop, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x9, [0x80000000, 0x7]}, @lsrr={0x83, 0xf, 0x28, [@rand_addr=0x64010101, @local, @broadcast]}, @end]}}}}}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) close$fd_v4l2_buffer(r0) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x800, 0x9, {r2, r3/1000+10000}, {0x77359400}, {0x3, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "bfc40930996707e6c6a06610733f92ad3068795b6f71455f94e5c02b28855669d0033d34325e610177aa8f71e159801fda9e5c72884545cb5e9c182c39ca7b31"}}, 0x80}, 0x1, 0x0, 0x0, 0x40081}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x800, 0x70bd23, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000814) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000480)=0x1) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000003c0)=0x1800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) (rerun: 32) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x480042) (async) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x2, 0x6, 0x40, '\x00', 0x7f}, 0x3, 0x10, 0x1, r1, 0x4, 0x80000001, 'syz1\x00', &(0x7f0000000100)=['/[%\x00', 'devlink\x00', 'devlink\x00', '/dev/nvram\x00'], 0x1f}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x64202) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x8, 0x800, {{0x21, 0x4, 0x3, 0x2e, 0x84, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xe, "f989459b7e473660308657d7"}, {0x1, 0x6, "7e2e31e8"}]}, @timestamp={0x44, 0x14, 0x62, 0x0, 0x8, [0x94, 0x7, 0x7ff, 0x4]}, @timestamp={0x44, 0x14, 0x2d, 0x0, 0xd, [0x8, 0x20, 0x20, 0x4]}, @generic={0x94, 0xa, "85f839e2750f4944"}, @noop, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x9, [0x80000000, 0x7]}, @lsrr={0x83, 0xf, 0x28, [@rand_addr=0x64010101, @local, @broadcast]}, @end]}}}}}) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$UI_DEV_DESTROY(r1, 0x5502) (async) close$fd_v4l2_buffer(r0) (async) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/235) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x800, 0x9, {r2, r3/1000+10000}, {0x77359400}, {0x3, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1d, 0x0, 0x0, 0x0, "bfc40930996707e6c6a06610733f92ad3068795b6f71455f94e5c02b28855669d0033d34325e610177aa8f71e159801fda9e5c72884545cb5e9c182c39ca7b31"}}, 0x80}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) close$fd_v4l2_buffer(r0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xfff3}, {0xfff2, 0x9}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:02:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x480042) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x2, 0x6, 0x40, '\x00', 0x7f}, 0x3, 0x10, 0x1, r1, 0x4, 0x80000001, 'syz1\x00', &(0x7f0000000100)=['/[%\x00', 'devlink\x00', 'devlink\x00', '/dev/nvram\x00'], 0x1f}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x64202) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x8, 0x800, {{0x21, 0x4, 0x3, 0x2e, 0x84, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xe, "f989459b7e473660308657d7"}, {0x1, 0x6, "7e2e31e8"}]}, @timestamp={0x44, 0x14, 0x62, 0x0, 0x8, [0x94, 0x7, 0x7ff, 0x4]}, @timestamp={0x44, 0x14, 0x2d, 0x0, 0xd, [0x8, 0x20, 0x20, 0x4]}, @generic={0x94, 0xa, "85f839e2750f4944"}, @noop, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x9, [0x80000000, 0x7]}, @lsrr={0x83, 0xf, 0x28, [@rand_addr=0x64010101, @local, @broadcast]}, @end]}}}}}) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x480042) (async) gettid() (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x2, 0x6, 0x40, '\x00', 0x7f}, 0x3, 0x10, 0x1, r1, 0x4, 0x80000001, 'syz1\x00', &(0x7f0000000100)=['/[%\x00', 'devlink\x00', 'devlink\x00', '/dev/nvram\x00'], 0x1f}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x64202) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20102, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x8, 0x800, {{0x21, 0x4, 0x3, 0x2e, 0x84, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xe, "f989459b7e473660308657d7"}, {0x1, 0x6, "7e2e31e8"}]}, @timestamp={0x44, 0x14, 0x62, 0x0, 0x8, [0x94, 0x7, 0x7ff, 0x4]}, @timestamp={0x44, 0x14, 0x2d, 0x0, 0xd, [0x8, 0x20, 0x20, 0x4]}, @generic={0x94, 0xa, "85f839e2750f4944"}, @noop, @timestamp={0x44, 0xc, 0xc6, 0x0, 0x9, [0x80000000, 0x7]}, @lsrr={0x83, 0xf, 0x28, [@rand_addr=0x64010101, @local, @broadcast]}, @end]}}}}}) (async) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x2) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 3: getuid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x1000, 0x7, {{0x2b, 0x4, 0x0, 0x9, 0xac, 0x67, 0x0, 0x7f, 0x5ab982551c8e0707, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0x3c, 0x1c, 0x3, 0x4, [{@private=0xa010101, 0x8}, {@rand_addr=0x64010102, 0xfff}, {@remote, 0xfffffffa}, {@loopback, 0x8974}, {@multicast2, 0x1ff}, {@remote, 0x62}, {@broadcast, 0x1f}]}, @lsrr={0x83, 0x17, 0x35, [@rand_addr=0x64010101, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @loopback, @broadcast, @broadcast, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x8, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x939d}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x700, 0x10, 0x0, 0x10001, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x40, 0x2f, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xdc, 0x0, 0x4, [0x1, 0x1, 0x46de, 0x6, 0x9, 0x2aa, 0x9]}, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x6, "1db3deda"}, {0x2, 0xa, "5df965a21027c61f"}, {0x2, 0xe, "e23dcd9772e96b72d7c4f3e1"}, {0x6, 0x12, "d226f0064905f3e387d66a285506b135"}, {0x0, 0x4, "3ffd"}]}]}}}}}) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xfff3}, {0xfff2, 0x9}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x25f3f273) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10000000000000, 0x701d80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/218) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast1, 0x9, 0x1d}}) 07:02:28 executing program 3: getuid() (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x1000, 0x7, {{0x2b, 0x4, 0x0, 0x9, 0xac, 0x67, 0x0, 0x7f, 0x5ab982551c8e0707, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0x3c, 0x1c, 0x3, 0x4, [{@private=0xa010101, 0x8}, {@rand_addr=0x64010102, 0xfff}, {@remote, 0xfffffffa}, {@loopback, 0x8974}, {@multicast2, 0x1ff}, {@remote, 0x62}, {@broadcast, 0x1f}]}, @lsrr={0x83, 0x17, 0x35, [@rand_addr=0x64010101, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @loopback, @broadcast, @broadcast, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x8, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x939d}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x700, 0x10, 0x0, 0x10001, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x40, 0x2f, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xdc, 0x0, 0x4, [0x1, 0x1, 0x46de, 0x6, 0x9, 0x2aa, 0x9]}, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x6, "1db3deda"}, {0x2, 0xa, "5df965a21027c61f"}, {0x2, 0xe, "e23dcd9772e96b72d7c4f3e1"}, {0x6, 0x12, "d226f0064905f3e387d66a285506b135"}, {0x0, 0x4, "3ffd"}]}]}}}}}) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x2) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x25f3f273) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10000000000000, 0x701d80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) (async) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/218) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast1, 0x9, 0x1d}}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) close$fd_v4l2_buffer(r0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xfff3}, {0xfff2, 0x9}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 07:02:28 executing program 3: getuid() r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x1000, 0x7, {{0x2b, 0x4, 0x0, 0x9, 0xac, 0x67, 0x0, 0x7f, 0x5ab982551c8e0707, 0x0, @broadcast, @private=0xa010102, {[@timestamp_prespec={0x44, 0x3c, 0x1c, 0x3, 0x4, [{@private=0xa010101, 0x8}, {@rand_addr=0x64010102, 0xfff}, {@remote, 0xfffffffa}, {@loopback, 0x8974}, {@multicast2, 0x1ff}, {@remote, 0x62}, {@broadcast, 0x1f}]}, @lsrr={0x83, 0x17, 0x35, [@rand_addr=0x64010101, @multicast2, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x23, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback, @loopback, @broadcast, @broadcast, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x44, 0x3, 0x8, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x939d}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x700, 0x10, 0x0, 0x10001, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x40, 0x2f, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xdc, 0x0, 0x4, [0x1, 0x1, 0x46de, 0x6, 0x9, 0x2aa, 0x9]}, @cipso={0x86, 0x3a, 0x2, [{0x2, 0x6, "1db3deda"}, {0x2, 0xa, "5df965a21027c61f"}, {0x2, 0xe, "e23dcd9772e96b72d7c4f3e1"}, {0x6, 0x12, "d226f0064905f3e387d66a285506b135"}, {0x0, 0x4, "3ffd"}]}]}}}}}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000080)={0x7fffffff, &(0x7f00000006c0)="d03b26e0a2cc5ee7311914788597e924e781e44d0fde3843ddf0792cd6697b7ae0dfb103e44a6b0799b4fe66ced4d6e44d401639b91008b35634d722f651226b795a8ececb7d9bc3c5cafbcc0cd7cf2363d204cea76a35cab0b8d3781ead76985bc2728a7e7c2b5d3aa64869d726b11ee0107bdf98eed8108fed1a463ee5e004b204b87ba9dedeb9b5d57aad7d6eccbaf4337ab2b79848b7d88ec32a1d7291335de591447fdfcd4fdff85ba95f611e3483199c5f32866ecd8aa8efe22f06ec13b7bccb1284cf5c172103a0f91cf49843a8d5ab19d090f30b65c59329a42b7af2a1ca5498249c7614b69bab01a1efce638aa37297543bf70717a484d7c8b360527be09fa10204ad3977b2f17e9923cfb719b90f195e18ef6148e02f990a81a26e4c338e38d0c0641e84a67c8bf2beca9b1efd600a0c7d709cb3da4515170585fdf1d437ec023427139d85c02113081482ec241b43f9661c5772fea28673383e225cbc1021c018d76ed5d48d6f20be899653a0499aa89838d77ad307bfe43a61847f056ca7225b7a9afaf2de903a8c13b61fc4d1a243b3552127585870d65a06f9f4efec201389fee7ad397c8f585d2c6e43b8393d3a598ceeddbaffab44512da3ff3830875be4bec97434d25fd29a61dfd3609a5184b111ebe330caa43d647e0d47f6d5dd57e1a2473a4c156b7cc8716284bc91f31369478f03feeae2ef2e8643e01b2b85ecff1f36b48643ae994dd6cd9dc4eb5ffa3957bdbb64acb01c20a2c9cf663df7f4926da8c9a5f7e83b71c858a008dfac75d4e1facb05a255a1dd21d4001c3684217573d54a3324a4b5263bd39fdbdbbd736571e65e46ebaaa401c5e4bd1204bd10574d4e708677281d5c5c26a440091ffff95cb55e4f0063d89b38697605a32de4139fd18b793ad693bb1faec4953f25b72b0fd1cfd114d4e25cf78c11ae939c1fde761bec22246447a67d69ccf8bd948a4854afa080b19a3dcef58831b643b8ba65b7c6952623d7d1f5700db47b17c87634f54db78e7a1045b29e14e38bdb4330636ac7c05edd47130a1f7240c2a88c75a0997ad5fe7732dd0efbcf48160010d3e0b927885ea749430d620a5c7d7b5d0c5acdaadea36873b586608d8a68d76f2e565078c15c5dc8a5b4644a9f7a800d88e79ed36d5dcf9b13b5646a23f5a10348ece89895770743456f40ab7873b48bc0197d8a7ace0aed581679b6b33f7dddc1219fe8994fc484ce73b9df9ecd2b63d500b9962e9f2082aac0cba8593379dae06317e05cdbdaf321a3375767d70fb0ab54af52acd18e51db19b91083fc81425ade3ead568ff328ddf6dee3b12cf18c033b36e81a8fa8979d86c9da25dc197eac62b72a832defd258c66549287a50eb50f23d329a9de508123379ef1320233a24f0cff040961fb59c5869bed9b52d1ff78685921f19ceb4a2190413622ce2bc16738746b4518ecf8f097c3f8881533b6a60cf97e1880aec9b71b162438c05d742ca2441deb1033b0d176633ed25ba5c21404134a98b009b2d23c1ab417457d8ef2b2fd92082c84c648518e926b4e9b46d907bec967f5af672ccb321c7a3f9a08bdf4f3110be7da43a2ee4167b9f9e771718df5a4d45ffe0a4703d8846dcc420f543a8833c26875bf472196cb139dfefaec15ee3e6ff307bd0437737739d5b31261f2afa85d075447816ec59ec5fb9f5a7ccc59cf3413a982aa3db9bf6b5ea02e3508aa66f91b7c6f4f9ac6d1a2ffc1977091815798490c86e9130db4ecca834fff0c3c9acd47379c331e13e845246da6634c19fc1556a011194e57b6c6c524dfd6ea171b4447e165a2083d00c1fc06d046b2227c765eccb9d8592aef6cb3a0da1222665bd0560dbe10b7e65de5a557b0b3717dcd059c248eeab2c49bfc969eabf8b08029286d313a54c96026ee901cc7888a604d797b5a55a5f5560ff27c5bc9527b7044b3ec99e04d4d60f9f420105fb58892ed57931322a9bbc6f7f520fcdce6791a0b7ab0da59508bbdc02c7e94c07941615e00bc29b1158dd3c62523c27db9759f35bed4376eb11eff0ab27291b4aa3a9a4c88fbdcd5af1cda098693d7b1646b45eecb7c6080ce38279682118c0029de7b8468f146186c0a206a0930adc7d8fea75f15377b26ba5e897b25d7d5389af42709a3a264e937d42653b0694a1b9a4e1182eb57d47f8ef7896a75df855893457bc005ddb1b9c23faa9ac259e6dcfbb95a655b737459203cebb2946b78b00de55c102a20e720e5bfb92860195796cdb275772ef0e5fa0586905ffede86070441e281c603b762da960f82f50a5184000cf5a56666645afd79fdde252622f1c64be998c552a640fb5361a9ca41a43cf1f9968e0d8b43e4a90cfaa9439af300e109b3a2cb7463bc856b4fc51599fd877376e3698a9572620294103f14b07aab85783f073b5e4b5429e33b694a4c8b4fb9ad5ba624634f7fc3e08483f37e15493f6a102a4ec986b79496bc9562d420e03ab2023dfceeb08d4a02c543f7f83b99edb72d07422cf48f5e3dd5c340e8fa373b3a9c840107e9e657fd62ec4f4fb3c6d7f41d45a694ea7ead38b6e4c915fdca613dbc64eb824d015489114d9a83e1677e8d10e2ae580a6d7c2de1d87d27bb67bc4a70196751cd2a4f09a80e4cddcfbad2d7ae9acdcf11ff386d3d571513ae6ce12b5d36c9a779696b0796c18f0beaa83632896bf433104cb418695a91d60035243c97c9eed310c708e1b1474f120257be7fc6ac1a220a3ea76da8e73fd246ebc16122ec000cbec885f5923e6522618611d3c45cd4e4fb286768a402bb7089cd2705bce2f3d53e98918aed2f996a9c30d85c8aa3493795e93b9ad879b4e04afbb259758adb2912d7435266d903f794aa319c1002fa169fc60b1dd8ea67ca75e51f8cfcdbeb798bb5ae4d488845e29d9461c577258feded990331f6e98016f128322dd2e8c20725a8b6d4df490645162798dcc2156621aab90b74e32a8e385bca5625dc262a297ec4bc059917b04250566be34413bbdc4af4fe656d586796f95a08e46a99f2a24e90f6b1d7a3369a6c31a26cfb63048b513ba90592692b75e8d66180a7d4ef789c4079afcafdc61a861e2a705cb1fad5f40686c20a2160a6a8c01a33e6e59cf01c1fb547bd97c5c5e94b2da3e2e8ffc76f895e85888738c6b6718307793ac3494fe8925546d938ee725019109e8245aa1639fc0324a7713da79e3a6eda882e8d2c3ef626342c04a7e12bf575fc310f3ed5a84293177c72f18f181115059a987c78a25a2b5cfdaae2660b5d5e84382a36cda5a8d9a692d4c1225731cd7bab88cf5da18997b5fa5795503082525821a258ceba4f637a322d273550d99b1abf0416bee4bbd0b8eb22c9d23981733d1e532eb8ccf281c8e9f0aa898b80f867552ba5b292f25151aca82b6dd14e263a012edd20fbc9bda690c93464cd6f5ec1d6e5518cb5c4ba532cfd1cdd57538273463ce9e6086e6b784815718232589a89b413b7f033102ec056ff20618ba7b8ceb4b4aeff447ce29ec2bb6422da768adabc906920da90f5571793136eeca41c737d6de385f4010bbfd8af4923969ca0da8d5556612f1bad5a73c97395560df11ae4ba28bbc39caf0d740e5b83a29d18520c4dcdf75bade4c18caed487a0ebd571ea8f8394d00b0e2e186e34af9d011a41880d68cf6f3086094ffd60f1faa3cc60b4e31eb8994c52017adaa2911289f7ed234ac520021ca64c7e39b1c166ece99e04c593ecba0284cb20a598aef1b67e4f1887ded4571a4b1a1ecc9e3efb51081df733093ec5d4e93ad1c3a953900f210efc184475d7d09906ace5ef6bfdaa21743808800a982aa7d4e16548d7238d3fb89d7fabae920df783289a75c7ee15acbe45805eaceea87d8737fde88a6a700252c166f33fe6065495d56d17a5d53761edef37f194c9d0236e728d7bf9d07d4bf152f5fa240fa3dbf975e325574e06e962c553595cf7e125cebb2a7233af99f4d6a7d4c648711b5a46d339e796b146800141c3bd5755e1266c0a4355460aa865003523df7c373541d766f6d094b8adaf9c87222392cb72653d7a7d950f2c697e548f420f5dbebf708e1622cbce86988638fc62106d72952422bf7fc8c9d27bf28436814e4636d56f7276031ba3fc404ab6795f55847d30c0ddeedffef570b8dcb3a6b680aab85d9ae3927713e9d5f25742b144d70eb54b4adb23c41b303588b4e0785eb774c678e382f7ab47725896ba5e0bbc2878a123d6e183c3140158d68cf1d9eb42f19f3ffa1a2f635bc9d890aa03719e87ff09a3ace55f09c1e51533f938d330c4a7597433505b8f5ad35d52e0922e3cdc02827b2c141ee77567afe890ad768d439c6d16b17ccdeb8bfddb6858a99b56c41ab553aa2cf2376cb20d3c213ca1bae487e85b383dff1db241fa271bd26e18b9d38d42e52a76a02a672169783cf1dd9352ae68cce8f6ee02fb0d2d84630eb80dd2fa5dccf48c61a67e6baefa8286ba597c0b5756b0c193f769b5a7eddd13ca262e41350387e0aab2a8b51681c2b3d22eb4b5034a00cb5fc1f9994d198196c57f19e71a6f05ce35083663dddf7a8d7674d91b6b87b904d595822d2f26c9a61c3b71875b341438905a3938d6e5c2e5ea908f92ec4de5be22020f6260f47424d31a18c6887adbedd8b6fbc8f9afa61bc6046fcfa2aa49db4e65cf8f46b83141534b6cc2015924b5a4667e509d1b8e11d9eb7e008a0e44be94bf538d4c96d63dd53a3234daadf97ab665f67dddbb1a108e96ba2119e98f9a19ed41e97f1a0064934fae680bb9babb7b1782bf46187ed8683cc977594c5b1dabf7687e0acc4d904b3a8b33d43788037921b284f2042c47d4f07eee4494903e740867c4ebb04c563401bf5d31c350f426da02121ab81300e3366d53931c7a8eb13f6b4654a308f4d764ea271a30b47e605efe6317a1a8d396232dd9679885288a039ecefa16cbdcade3f77e4f8e3738cdaf67fe1fb35d4af4527256f6ddaa1744345679738d5f223b6f0dc053ca2cb5ad1782c83f14ab3ab58dd276517c1d4301b29cee104c60faf2c4c9ab0a7dce1de68eab483427209ff8d801d5b59440cffd26bf150aeb174a3a428c91d77b8217d296082a0a3e60b180c6c9622ef4cd5cd6703e8727e13cb8a88da05dcdff48995bfef275e2b7ed41293aa9229b5c154a164e74e59fe836aba46acf34937d5b428303a7510eb842cae3d797a1f550f5738f66fd1aedab9f831befb5c2987196d79b261593e61851f73acbfa0a957fc27eb668d4292dfd163bbab6b3a048cd831aa92860c4ce91a4e6882a1352f3f337a2815b5c2be77ab060d1791d7b966c24e6df087f3dc97c9d763629ff5ed4f05fdb2037651febfcd7277112a3b75a7ebe54c9ece96d0b46313140f014010a54858c87a6b0cfd1c0ab60b9df74ecd5673a525b38266acd9ad9d77fcbe03522c382a3b368abda7f0ddd4ccb6a6f5d19c9cce12a365f85faddc0f1dac9e568efbd29a429d208692e8e6343cb999d51dcfae2a613c2393836ce0cf2cd084d430817da870f2b7e392e23f9408c960caa7bc011b9a0849f01f12dfa1087227b4942e82beff1d690f3e7d4e617f5161c724feecbbbd985e4dad607bc2e19c610cfbc180bb0b4dd1f84bdf68ce536e923f5c4502b3d9649182a419cc58e68843e1cec93db3f1211967b910c21f011136de78a8c06a0c433d05e2013b2856150676210269a98ff36cd5aee05d2c187f577211225f476b532497fc80efdba5dde7646c3d4fd6f9435334e00043b18963b273e41ced2f"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x25f3f273) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10000000000000, 0x701d80) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/218) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast1, 0x9, 0x1d}}) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:28 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000080)={0x7fffffff, &(0x7f00000006c0)="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"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x902) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x6}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:28 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x902) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x902) (async) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000080)={0x7fffffff, &(0x7f00000006c0)="d03b26e0a2cc5ee7311914788597e924e781e44d0fde3843ddf0792cd6697b7ae0dfb103e44a6b0799b4fe66ced4d6e44d401639b91008b35634d722f651226b795a8ececb7d9bc3c5cafbcc0cd7cf2363d204cea76a35cab0b8d3781ead76985bc2728a7e7c2b5d3aa64869d726b11ee0107bdf98eed8108fed1a463ee5e004b204b87ba9dedeb9b5d57aad7d6eccbaf4337ab2b79848b7d88ec32a1d7291335de591447fdfcd4fdff85ba95f611e3483199c5f32866ecd8aa8efe22f06ec13b7bccb1284cf5c172103a0f91cf49843a8d5ab19d090f30b65c59329a42b7af2a1ca5498249c7614b69bab01a1efce638aa37297543bf70717a484d7c8b360527be09fa10204ad3977b2f17e9923cfb719b90f195e18ef6148e02f990a81a26e4c338e38d0c0641e84a67c8bf2beca9b1efd600a0c7d709cb3da4515170585fdf1d437ec023427139d85c02113081482ec241b43f9661c5772fea28673383e225cbc1021c018d76ed5d48d6f20be899653a0499aa89838d77ad307bfe43a61847f056ca7225b7a9afaf2de903a8c13b61fc4d1a243b3552127585870d65a06f9f4efec201389fee7ad397c8f585d2c6e43b8393d3a598ceeddbaffab44512da3ff3830875be4bec97434d25fd29a61dfd3609a5184b111ebe330caa43d647e0d47f6d5dd57e1a2473a4c156b7cc8716284bc91f31369478f03feeae2ef2e8643e01b2b85ecff1f36b48643ae994dd6cd9dc4eb5ffa3957bdbb64acb01c20a2c9cf663df7f4926da8c9a5f7e83b71c858a008dfac75d4e1facb05a255a1dd21d4001c3684217573d54a3324a4b5263bd39fdbdbbd736571e65e46ebaaa401c5e4bd1204bd10574d4e708677281d5c5c26a440091ffff95cb55e4f0063d89b38697605a32de4139fd18b793ad693bb1faec4953f25b72b0fd1cfd114d4e25cf78c11ae939c1fde761bec22246447a67d69ccf8bd948a4854afa080b19a3dcef58831b643b8ba65b7c6952623d7d1f5700db47b17c87634f54db78e7a1045b29e14e38bdb4330636ac7c05edd47130a1f7240c2a88c75a0997ad5fe7732dd0efbcf48160010d3e0b927885ea749430d620a5c7d7b5d0c5acdaadea36873b586608d8a68d76f2e565078c15c5dc8a5b4644a9f7a800d88e79ed36d5dcf9b13b5646a23f5a10348ece89895770743456f40ab7873b48bc0197d8a7ace0aed581679b6b33f7dddc1219fe8994fc484ce73b9df9ecd2b63d500b9962e9f2082aac0cba8593379dae06317e05cdbdaf321a3375767d70fb0ab54af52acd18e51db19b91083fc81425ade3ead568ff328ddf6dee3b12cf18c033b36e81a8fa8979d86c9da25dc197eac62b72a832defd258c66549287a50eb50f23d329a9de508123379ef1320233a24f0cff040961fb59c5869bed9b52d1ff78685921f19ceb4a2190413622ce2bc16738746b4518ecf8f097c3f8881533b6a60cf97e1880aec9b71b162438c05d742ca2441deb1033b0d176633ed25ba5c21404134a98b009b2d23c1ab417457d8ef2b2fd92082c84c648518e926b4e9b46d907bec967f5af672ccb321c7a3f9a08bdf4f3110be7da43a2ee4167b9f9e771718df5a4d45ffe0a4703d8846dcc420f543a8833c26875bf472196cb139dfefaec15ee3e6ff307bd0437737739d5b31261f2afa85d075447816ec59ec5fb9f5a7ccc59cf3413a982aa3db9bf6b5ea02e3508aa66f91b7c6f4f9ac6d1a2ffc1977091815798490c86e9130db4ecca834fff0c3c9acd47379c331e13e845246da6634c19fc1556a011194e57b6c6c524dfd6ea171b4447e165a2083d00c1fc06d046b2227c765eccb9d8592aef6cb3a0da1222665bd0560dbe10b7e65de5a557b0b3717dcd059c248eeab2c49bfc969eabf8b08029286d313a54c96026ee901cc7888a604d797b5a55a5f5560ff27c5bc9527b7044b3ec99e04d4d60f9f420105fb58892ed57931322a9bbc6f7f520fcdce6791a0b7ab0da59508bbdc02c7e94c07941615e00bc29b1158dd3c62523c27db9759f35bed4376eb11eff0ab27291b4aa3a9a4c88fbdcd5af1cda098693d7b1646b45eecb7c6080ce38279682118c0029de7b8468f146186c0a206a0930adc7d8fea75f15377b26ba5e897b25d7d5389af42709a3a264e937d42653b0694a1b9a4e1182eb57d47f8ef7896a75df855893457bc005ddb1b9c23faa9ac259e6dcfbb95a655b737459203cebb2946b78b00de55c102a20e720e5bfb92860195796cdb275772ef0e5fa0586905ffede86070441e281c603b762da960f82f50a5184000cf5a56666645afd79fdde252622f1c64be998c552a640fb5361a9ca41a43cf1f9968e0d8b43e4a90cfaa9439af300e109b3a2cb7463bc856b4fc51599fd877376e3698a9572620294103f14b07aab85783f073b5e4b5429e33b694a4c8b4fb9ad5ba624634f7fc3e08483f37e15493f6a102a4ec986b79496bc9562d420e03ab2023dfceeb08d4a02c543f7f83b99edb72d07422cf48f5e3dd5c340e8fa373b3a9c840107e9e657fd62ec4f4fb3c6d7f41d45a694ea7ead38b6e4c915fdca613dbc64eb824d015489114d9a83e1677e8d10e2ae580a6d7c2de1d87d27bb67bc4a70196751cd2a4f09a80e4cddcfbad2d7ae9acdcf11ff386d3d571513ae6ce12b5d36c9a779696b0796c18f0beaa83632896bf433104cb418695a91d60035243c97c9eed310c708e1b1474f120257be7fc6ac1a220a3ea76da8e73fd246ebc16122ec000cbec885f5923e6522618611d3c45cd4e4fb286768a402bb7089cd2705bce2f3d53e98918aed2f996a9c30d85c8aa3493795e93b9ad879b4e04afbb259758adb2912d7435266d903f794aa319c1002fa169fc60b1dd8ea67ca75e51f8cfcdbeb798bb5ae4d488845e29d9461c577258feded990331f6e98016f128322dd2e8c20725a8b6d4df490645162798dcc2156621aab90b74e32a8e385bca5625dc262a297ec4bc059917b04250566be34413bbdc4af4fe656d586796f95a08e46a99f2a24e90f6b1d7a3369a6c31a26cfb63048b513ba90592692b75e8d66180a7d4ef789c4079afcafdc61a861e2a705cb1fad5f40686c20a2160a6a8c01a33e6e59cf01c1fb547bd97c5c5e94b2da3e2e8ffc76f895e85888738c6b6718307793ac3494fe8925546d938ee725019109e8245aa1639fc0324a7713da79e3a6eda882e8d2c3ef626342c04a7e12bf575fc310f3ed5a84293177c72f18f181115059a987c78a25a2b5cfdaae2660b5d5e84382a36cda5a8d9a692d4c1225731cd7bab88cf5da18997b5fa5795503082525821a258ceba4f637a322d273550d99b1abf0416bee4bbd0b8eb22c9d23981733d1e532eb8ccf281c8e9f0aa898b80f867552ba5b292f25151aca82b6dd14e263a012edd20fbc9bda690c93464cd6f5ec1d6e5518cb5c4ba532cfd1cdd57538273463ce9e6086e6b784815718232589a89b413b7f033102ec056ff20618ba7b8ceb4b4aeff447ce29ec2bb6422da768adabc906920da90f5571793136eeca41c737d6de385f4010bbfd8af4923969ca0da8d5556612f1bad5a73c97395560df11ae4ba28bbc39caf0d740e5b83a29d18520c4dcdf75bade4c18caed487a0ebd571ea8f8394d00b0e2e186e34af9d011a41880d68cf6f3086094ffd60f1faa3cc60b4e31eb8994c52017adaa2911289f7ed234ac520021ca64c7e39b1c166ece99e04c593ecba0284cb20a598aef1b67e4f1887ded4571a4b1a1ecc9e3efb51081df733093ec5d4e93ad1c3a953900f210efc184475d7d09906ace5ef6bfdaa21743808800a982aa7d4e16548d7238d3fb89d7fabae920df783289a75c7ee15acbe45805eaceea87d8737fde88a6a700252c166f33fe6065495d56d17a5d53761edef37f194c9d0236e728d7bf9d07d4bf152f5fa240fa3dbf975e325574e06e962c553595cf7e125cebb2a7233af99f4d6a7d4c648711b5a46d339e796b146800141c3bd5755e1266c0a4355460aa865003523df7c373541d766f6d094b8adaf9c87222392cb72653d7a7d950f2c697e548f420f5dbebf708e1622cbce86988638fc62106d72952422bf7fc8c9d27bf28436814e4636d56f7276031ba3fc404ab6795f55847d30c0ddeedffef570b8dcb3a6b680aab85d9ae3927713e9d5f25742b144d70eb54b4adb23c41b303588b4e0785eb774c678e382f7ab47725896ba5e0bbc2878a123d6e183c3140158d68cf1d9eb42f19f3ffa1a2f635bc9d890aa03719e87ff09a3ace55f09c1e51533f938d330c4a7597433505b8f5ad35d52e0922e3cdc02827b2c141ee77567afe890ad768d439c6d16b17ccdeb8bfddb6858a99b56c41ab553aa2cf2376cb20d3c213ca1bae487e85b383dff1db241fa271bd26e18b9d38d42e52a76a02a672169783cf1dd9352ae68cce8f6ee02fb0d2d84630eb80dd2fa5dccf48c61a67e6baefa8286ba597c0b5756b0c193f769b5a7eddd13ca262e41350387e0aab2a8b51681c2b3d22eb4b5034a00cb5fc1f9994d198196c57f19e71a6f05ce35083663dddf7a8d7674d91b6b87b904d595822d2f26c9a61c3b71875b341438905a3938d6e5c2e5ea908f92ec4de5be22020f6260f47424d31a18c6887adbedd8b6fbc8f9afa61bc6046fcfa2aa49db4e65cf8f46b83141534b6cc2015924b5a4667e509d1b8e11d9eb7e008a0e44be94bf538d4c96d63dd53a3234daadf97ab665f67dddbb1a108e96ba2119e98f9a19ed41e97f1a0064934fae680bb9babb7b1782bf46187ed8683cc977594c5b1dabf7687e0acc4d904b3a8b33d43788037921b284f2042c47d4f07eee4494903e740867c4ebb04c563401bf5d31c350f426da02121ab81300e3366d53931c7a8eb13f6b4654a308f4d764ea271a30b47e605efe6317a1a8d396232dd9679885288a039ecefa16cbdcade3f77e4f8e3738cdaf67fe1fb35d4af4527256f6ddaa1744345679738d5f223b6f0dc053ca2cb5ad1782c83f14ab3ab58dd276517c1d4301b29cee104c60faf2c4c9ab0a7dce1de68eab483427209ff8d801d5b59440cffd26bf150aeb174a3a428c91d77b8217d296082a0a3e60b180c6c9622ef4cd5cd6703e8727e13cb8a88da05dcdff48995bfef275e2b7ed41293aa9229b5c154a164e74e59fe836aba46acf34937d5b428303a7510eb842cae3d797a1f550f5738f66fd1aedab9f831befb5c2987196d79b261593e61851f73acbfa0a957fc27eb668d4292dfd163bbab6b3a048cd831aa92860c4ce91a4e6882a1352f3f337a2815b5c2be77ab060d1791d7b966c24e6df087f3dc97c9d763629ff5ed4f05fdb2037651febfcd7277112a3b75a7ebe54c9ece96d0b46313140f014010a54858c87a6b0cfd1c0ab60b9df74ecd5673a525b38266acd9ad9d77fcbe03522c382a3b368abda7f0ddd4ccb6a6f5d19c9cce12a365f85faddc0f1dac9e568efbd29a429d208692e8e6343cb999d51dcfae2a613c2393836ce0cf2cd084d430817da870f2b7e392e23f9408c960caa7bc011b9a0849f01f12dfa1087227b4942e82beff1d690f3e7d4e617f5161c724feecbbbd985e4dad607bc2e19c610cfbc180bb0b4dd1f84bdf68ce536e923f5c4502b3d9649182a419cc58e68843e1cec93db3f1211967b910c21f011136de78a8c06a0c433d05e2013b2856150676210269a98ff36cd5aee05d2c187f577211225f476b532497fc80efdba5dde7646c3d4fd6f9435334e00043b18963b273e41ced2f"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000080)={0x7fffffff, &(0x7f00000006c0)="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"}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:28 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x6}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffe, 0x902) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x2) close$fd_v4l2_buffer(r0) 07:02:28 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x2de1df5, 0x6, 0x4, 0x100, 0x390, {0x0, 0x2710}, {0x1, 0x8, 0x20, 0x6, 0x6, 0x0, "ed6e8a4e"}, 0x4, 0x4, {0xffffffffffffffff}, 0x40, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r2) r4 = socket(0xa, 0x5, 0x0) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000004c0)={0x1, {0x40, 0x1, 0xffffffff, 0x5, 0x5, 0x7}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="04002bbd7000fbdbdf2506000000080001007063690031302e300000000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000060004000000000e080001007063690011000200303030303a30303a31302e300000000008000300000000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) sendto$phonet(r1, &(0x7f0000000100)="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", 0xff, 0x4005, &(0x7f0000000000)={0x23, 0x20, 0x0, 0x80}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 2: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x2) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x2) (async) close$fd_v4l2_buffer(r0) (async) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x250440, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:28 executing program 2: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x2de1df5, 0x6, 0x4, 0x100, 0x390, {0x0, 0x2710}, {0x1, 0x8, 0x20, 0x6, 0x6, 0x0, "ed6e8a4e"}, 0x4, 0x4, {0xffffffffffffffff}, 0x40, 0x0, r0}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) close$fd_v4l2_buffer(r2) (async) r4 = socket(0xa, 0x5, 0x0) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000004c0)={0x1, {0x40, 0x1, 0xffffffff, 0x5, 0x5, 0x7}}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="04002bbd7000fbdbdf2506000000080001007063690031302e300000000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000060004000000000e080001007063690011000200303030303a30303a31302e300000000008000300000000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) sendto$phonet(r1, &(0x7f0000000100)="eb68c6330b06fb4b105592213323a5712062656d1ee04448944a9f54f8ba28d340cf1eba2f7090a1e82922a0ba25a62bccc56ca72f953a8f8f993560f8b98870e6e41a93ec49b204bf015d4aed9cf2fb21822e0d606f7cda8bfc9c17235246708a60575d7b99d16cdcbb7724067ed9d2f332b9e466bd9acddd4e97dd9e72e7114be54e53164e7f309c1af87cf78e7a78632d505430b542b5b492cf51f0c67b951c68599846957fa56c75c1b8e0b020e766b3361442b5162fd0a416c5c62c556aa76af9e02d790e3e2c754900432b31c66c82292c1f5fb3419e2244c14414b8318cd37e02cbcea84a93d4fbbfdf1cf321d30c690eedf2e7c1cdca727454915f", 0xff, 0x4005, &(0x7f0000000000)={0x23, 0x20, 0x0, 0x80}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x250440, 0x0) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x2) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x2) (async) close$fd_v4l2_buffer(r0) (async) 07:02:28 executing program 2: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x2de1df5, 0x6, 0x4, 0x100, 0x390, {0x0, 0x2710}, {0x1, 0x8, 0x20, 0x6, 0x6, 0x0, "ed6e8a4e"}, 0x4, 0x4, {0xffffffffffffffff}, 0x40, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r2) (async) r4 = socket(0xa, 0x5, 0x0) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000004c0)={0x1, {0x40, 0x1, 0xffffffff, 0x5, 0x5, 0x7}}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) sendto$phonet(r1, &(0x7f0000000100)="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", 0xff, 0x4005, &(0x7f0000000000)={0x23, 0x20, 0x0, 0x80}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (rerun: 32) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x250440, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xc9, 0x8, {{0x12, 0x4, 0x1, 0x3f, 0x48, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x23, 0xc4, [@private=0xa010102, @loopback, @private=0xa010102, @loopback, @loopback, @rand_addr=0x64010101, @multicast1, @loopback]}, @lsrr={0x83, 0xf, 0xf6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @end, @noop]}}}}}) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) r2 = accept$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000340)=0x10) sendto$phonet(r2, &(0x7f0000000380)="d9d71f01ca0e4a4aaef896b777cee3ab871117ebf0456efa687f509f1dfb4fac342b98e1b317971644147a1f14321eb85baa1533f48ba416eccc517c09d0f0fbda1bab61f2003352c77a83b42b874f3c9e442f51bd4e918aafe0eddbb29448b40fc74f9949db8990a6d7c7c7c08293a82e8468ae556084c991c7f0b7de46e7f38cba7bbd61b4369e929b184d2b03d9b7f5c87fb758c0badba452fe5a477be0a42fe488ca41fee7939d09e633f39959c52007c20552659b35f64655043cac9057d6cf90d2bf6997ba0832de0812625ebb44", 0xd1, 0x0, &(0x7f0000000480)={0x23, 0x8, 0x20, 0x3}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x4, 0x692, 0xffffffff, '\x00', 0x3}, 0x6, 0x100, 0x800, 0x0, 0x7, 0xea, 'syz0\x00', &(0x7f0000000040)=['/dev/snd/controlC#\x00', '/dev/nvram\x00', '/+\x00', '\'.\x00', '}\\\x00', '/dev/nvram\x00', '/dev/snd/controlC#\x00'], 0x45}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x6, 0x5, 0x3ff, '\x00', 0x7}, 0x3, 0x2, 0x0, 0x0, 0xa, 0x101, 'syz1\x00', &(0x7f0000000500)=['/dev/snd/controlC#\x00', ']\\&$&.}!@{\\\x00', '}@}\\!%@&)\x00', '\xe5#%^\xd0&:\x00', ']#^\x00', ',$:\x00', '\x00', '-\x00', 'syz0\x00', '/dev/snd/controlC#\x00'], 0x54}) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000140)=0x6) 07:02:28 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x1e, 0xa, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) (async) r2 = accept$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000340)=0x10) sendto$phonet(r2, &(0x7f0000000380)="d9d71f01ca0e4a4aaef896b777cee3ab871117ebf0456efa687f509f1dfb4fac342b98e1b317971644147a1f14321eb85baa1533f48ba416eccc517c09d0f0fbda1bab61f2003352c77a83b42b874f3c9e442f51bd4e918aafe0eddbb29448b40fc74f9949db8990a6d7c7c7c08293a82e8468ae556084c991c7f0b7de46e7f38cba7bbd61b4369e929b184d2b03d9b7f5c87fb758c0badba452fe5a477be0a42fe488ca41fee7939d09e633f39959c52007c20552659b35f64655043cac9057d6cf90d2bf6997ba0832de0812625ebb44", 0xd1, 0x0, &(0x7f0000000480)={0x23, 0x8, 0x20, 0x3}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x4, 0x692, 0xffffffff, '\x00', 0x3}, 0x6, 0x100, 0x800, 0x0, 0x7, 0xea, 'syz0\x00', &(0x7f0000000040)=['/dev/snd/controlC#\x00', '/dev/nvram\x00', '/+\x00', '\'.\x00', '}\\\x00', '/dev/nvram\x00', '/dev/snd/controlC#\x00'], 0x45}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x6, 0x5, 0x3ff, '\x00', 0x7}, 0x3, 0x2, 0x0, 0x0, 0xa, 0x101, 'syz1\x00', &(0x7f0000000500)=['/dev/snd/controlC#\x00', ']\\&$&.}!@{\\\x00', '}@}\\!%@&)\x00', '\xe5#%^\xd0&:\x00', ']#^\x00', ',$:\x00', '\x00', '-\x00', 'syz0\x00', '/dev/snd/controlC#\x00'], 0x54}) (async) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000140)=0x6) 07:02:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:28 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:28 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x1e, 0xa, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:28 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) r2 = accept$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000340)=0x10) sendto$phonet(r2, &(0x7f0000000380)="d9d71f01ca0e4a4aaef896b777cee3ab871117ebf0456efa687f509f1dfb4fac342b98e1b317971644147a1f14321eb85baa1533f48ba416eccc517c09d0f0fbda1bab61f2003352c77a83b42b874f3c9e442f51bd4e918aafe0eddbb29448b40fc74f9949db8990a6d7c7c7c08293a82e8468ae556084c991c7f0b7de46e7f38cba7bbd61b4369e929b184d2b03d9b7f5c87fb758c0badba452fe5a477be0a42fe488ca41fee7939d09e633f39959c52007c20552659b35f64655043cac9057d6cf90d2bf6997ba0832de0812625ebb44", 0xd1, 0x0, &(0x7f0000000480)={0x23, 0x8, 0x20, 0x3}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x4, 0x692, 0xffffffff, '\x00', 0x3}, 0x6, 0x100, 0x800, 0x0, 0x7, 0xea, 'syz0\x00', &(0x7f0000000040)=['/dev/snd/controlC#\x00', '/dev/nvram\x00', '/+\x00', '\'.\x00', '}\\\x00', '/dev/nvram\x00', '/dev/snd/controlC#\x00'], 0x45}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x6, 0x5, 0x3ff, '\x00', 0x7}, 0x3, 0x2, 0x0, 0x0, 0xa, 0x101, 'syz1\x00', &(0x7f0000000500)=['/dev/snd/controlC#\x00', ']\\&$&.}!@{\\\x00', '}@}\\!%@&)\x00', '\xe5#%^\xd0&:\x00', ']#^\x00', ',$:\x00', '\x00', '-\x00', 'syz0\x00', '/dev/snd/controlC#\x00'], 0x54}) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000140)=0x6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) (async) accept$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000340)=0x10) (async) sendto$phonet(r2, &(0x7f0000000380)="d9d71f01ca0e4a4aaef896b777cee3ab871117ebf0456efa687f509f1dfb4fac342b98e1b317971644147a1f14321eb85baa1533f48ba416eccc517c09d0f0fbda1bab61f2003352c77a83b42b874f3c9e442f51bd4e918aafe0eddbb29448b40fc74f9949db8990a6d7c7c7c08293a82e8468ae556084c991c7f0b7de46e7f38cba7bbd61b4369e929b184d2b03d9b7f5c87fb758c0badba452fe5a477be0a42fe488ca41fee7939d09e633f39959c52007c20552659b35f64655043cac9057d6cf90d2bf6997ba0832de0812625ebb44", 0xd1, 0x0, &(0x7f0000000480)={0x23, 0x8, 0x20, 0x3}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x4, 0x692, 0xffffffff, '\x00', 0x3}, 0x6, 0x100, 0x800, 0x0, 0x7, 0xea, 'syz0\x00', &(0x7f0000000040)=['/dev/snd/controlC#\x00', '/dev/nvram\x00', '/+\x00', '\'.\x00', '}\\\x00', '/dev/nvram\x00', '/dev/snd/controlC#\x00'], 0x45}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000006c0)={{0x5, 0x6, 0x5, 0x3ff, '\x00', 0x7}, 0x3, 0x2, 0x0, 0x0, 0xa, 0x101, 'syz1\x00', &(0x7f0000000500)=['/dev/snd/controlC#\x00', ']\\&$&.}!@{\\\x00', '}@}\\!%@&)\x00', '\xe5#%^\xd0&:\x00', ']#^\x00', ',$:\x00', '\x00', '-\x00', 'syz0\x00', '/dev/snd/controlC#\x00'], 0x54}) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000140)=0x6) (async) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xc9, 0x8, {{0x12, 0x4, 0x1, 0x3f, 0x48, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x23, 0xc4, [@private=0xa010102, @loopback, @private=0xa010102, @loopback, @loopback, @rand_addr=0x64010101, @multicast1, @loopback]}, @lsrr={0x83, 0xf, 0xf6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @end, @noop]}}}}}) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket(0x1e, 0xa, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) socket(0x1e, 0xa, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x1, 0x8, 0x8, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0x49, [@loopback, @empty, @multicast2, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x401, 0x800, 0xfc3, 0x4, 0x5, 0x1000, 0x8]}, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xc9, 0x8, {{0x12, 0x4, 0x1, 0x3f, 0x48, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x23, 0xc4, [@private=0xa010102, @loopback, @private=0xa010102, @loopback, @loopback, @rand_addr=0x64010101, @multicast1, @loopback]}, @lsrr={0x83, 0xf, 0xf6, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @end, @noop]}}}}}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) (async) close$fd_v4l2_buffer(r0) (async) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x1, 0x8, 0x8, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0x49, [@loopback, @empty, @multicast2, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x401, 0x800, 0xfc3, 0x4, 0x5, 0x1000, 0x8]}, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x1, 0x8, 0x8, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0x49, [@loopback, @empty, @multicast2, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x401, 0x800, 0xfc3, 0x4, 0x5, 0x1000, 0x8]}, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0x100000, 0x5, {}, {0x5, 0x2, 0xc, 0x23, 0x2, 0x3, "d7d10dea"}, 0x1, 0x4, {}, 0x37}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000000)={0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000140)={0x8, &(0x7f0000000980)=[{@fixed}, {}, {}, {@fixed}, {@none}, {@fixed}, {@fixed}, {@fixed}]}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) (async) close$fd_v4l2_buffer(r0) (async) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x1, 0x8, 0x8, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0x49, [@loopback, @empty, @multicast2, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x401, 0x800, 0xfc3, 0x4, 0x5, 0x1000, 0x8]}, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x1, 0x8, 0x8, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x17, 0x49, [@loopback, @empty, @multicast2, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x32, 0x0, 0x2, [0x401, 0x800, 0xfc3, 0x4, 0x5, 0x1000, 0x8]}, @ssrr={0x89, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) (async, rerun: 64) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0x100000, 0x5, {}, {0x5, 0x2, 0xc, 0x23, 0x2, 0x3, "d7d10dea"}, 0x1, 0x4, {}, 0x37}) (async, rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async, rerun: 32) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000000)={0x2}) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000140)={0x8, &(0x7f0000000980)=[{@fixed}, {}, {}, {@fixed}, {@none}, {@fixed}, {@fixed}, {@fixed}]}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 07:02:29 executing program 4: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xd62c0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x9}) close$fd_v4l2_buffer(r0) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r3) r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0x100000, 0x5, {}, {0x5, 0x2, 0xc, 0x23, 0x2, 0x3, "d7d10dea"}, 0x1, 0x4, {}, 0x37}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000000)={0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000140)={0x8, &(0x7f0000000980)=[{@fixed}, {}, {}, {@fixed}, {@none}, {@fixed}, {@fixed}, {@fixed}]}) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) (async) 07:02:29 executing program 4: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xd62c0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xd62c0, 0x0) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x9}) (async) close$fd_v4l2_buffer(r0) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 3: r0 = socket(0x3, 0x6, 0x10000) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x50440, 0x0) close$fd_v4l2_buffer(r1) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffffff80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000180)="8a03b424819d07ad85f0b0a39018778f64426f5e09d62b1e7c53472b706a5ee85836a38479f6b1258489abeb7331339e035ecbd167cbf685f501098bf4107cbb49343733ccdd5ced4126b4771b481e71df8eff8b1c00ef485249d4edb0bc588bba4d6097346aa893a7ed98383dd2604f55185884815e69130c12d8912c042213cbe9b9124d95e781974527ee9f16e967d499b70b34d81776", &(0x7f0000000240)=@buf="65146943f5249443062eb0bfbaaa1387b9893a5900e664fae4bc80488fc414f3ceb31507278c61"}, 0x20) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x101, 0x6, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x5, 0x0, 0x6, 0x2, 0xce, 0x6, "0944110d"}, 0x81, 0x4, {}, 0x3}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = getpgid(0x0) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0xff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x11, 0x17}}) 07:02:29 executing program 4: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xd62c0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000000c0)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xd62c0, 0x0) (async) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x9}) (async) close$fd_v4l2_buffer(r0) 07:02:29 executing program 3: r0 = socket(0x3, 0x6, 0x10000) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x50440, 0x0) close$fd_v4l2_buffer(r1) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffffff80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000180)="8a03b424819d07ad85f0b0a39018778f64426f5e09d62b1e7c53472b706a5ee85836a38479f6b1258489abeb7331339e035ecbd167cbf685f501098bf4107cbb49343733ccdd5ced4126b4771b481e71df8eff8b1c00ef485249d4edb0bc588bba4d6097346aa893a7ed98383dd2604f55185884815e69130c12d8912c042213cbe9b9124d95e781974527ee9f16e967d499b70b34d81776", &(0x7f0000000240)=@buf="65146943f5249443062eb0bfbaaa1387b9893a5900e664fae4bc80488fc414f3ceb31507278c61"}, 0x20) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x101, 0x6, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x5, 0x0, 0x6, 0x2, 0xce, 0x6, "0944110d"}, 0x81, 0x4, {}, 0x3}) socket(0x3, 0x6, 0x10000) (async) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x50440, 0x0) (async) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffffff80) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000180)="8a03b424819d07ad85f0b0a39018778f64426f5e09d62b1e7c53472b706a5ee85836a38479f6b1258489abeb7331339e035ecbd167cbf685f501098bf4107cbb49343733ccdd5ced4126b4771b481e71df8eff8b1c00ef485249d4edb0bc588bba4d6097346aa893a7ed98383dd2604f55185884815e69130c12d8912c042213cbe9b9124d95e781974527ee9f16e967d499b70b34d81776", &(0x7f0000000240)=@buf="65146943f5249443062eb0bfbaaa1387b9893a5900e664fae4bc80488fc414f3ceb31507278c61"}, 0x20) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x101, 0x6, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x5, 0x0, 0x6, 0x2, 0xce, 0x6, "0944110d"}, 0x81, 0x4, {}, 0x3}) (async) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = getpgid(0x0) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0xff8) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x11, 0x17}}) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = getpgid(0x0) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0xff8) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x11, 0x17}}) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0xfff, 0x3, 0x4, 0x40, 0xffff0001, {r3, r4/1000+60000}, {0x4, 0x8, 0x1, 0xff, 0x4, 0x1, "b2c1e207"}, 0x80000000, 0x4, {}, 0xff, 0x0, r0}) 07:02:29 executing program 3: r0 = socket(0x3, 0x6, 0x10000) setsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x50440, 0x0) (rerun: 64) close$fd_v4l2_buffer(r1) (async) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffffff80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000180)="8a03b424819d07ad85f0b0a39018778f64426f5e09d62b1e7c53472b706a5ee85836a38479f6b1258489abeb7331339e035ecbd167cbf685f501098bf4107cbb49343733ccdd5ced4126b4771b481e71df8eff8b1c00ef485249d4edb0bc588bba4d6097346aa893a7ed98383dd2604f55185884815e69130c12d8912c042213cbe9b9124d95e781974527ee9f16e967d499b70b34d81776", &(0x7f0000000240)=@buf="65146943f5249443062eb0bfbaaa1387b9893a5900e664fae4bc80488fc414f3ceb31507278c61"}, 0x20) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x101, 0x6, 0x4, 0x0, 0x7, {r3, r4/1000+10000}, {0x5, 0x0, 0x6, 0x2, 0xce, 0x6, "0944110d"}, 0x81, 0x4, {}, 0x3}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x2040, 0x44200) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0xfff, 0x3, 0x4, 0x40, 0xffff0001, {r3, r4/1000+60000}, {0x4, 0x8, 0x1, 0xff, 0x4, 0x1, "b2c1e207"}, 0x80000000, 0x4, {}, 0xff, 0x0, r0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0xfff, 0x3, 0x4, 0x40, 0xffff0001, {r3, r4/1000+60000}, {0x4, 0x8, 0x1, 0xff, 0x4, 0x1, "b2c1e207"}, 0x80000000, 0x4, {}, 0xff, 0x0, r0}) (async) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) (async, rerun: 64) close$fd_v4l2_buffer(r0) (rerun: 64) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/mnt\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5a, 0x7, 0xb7b, 0x1, 0x9, "57248e0e7d939e2cf76a98058145f8d2cf2632156a63db33acdc03f910d2c448bb2447fb70be7001ce4e987125c9bf55b40d0402307ba11eb09ad698083a2280074d461f909eb21d7082658ff87b4f0fdc74b6802e7a34d8460fdcc2579d5c5e1b966f38992aa75e8b79a2b58760439e300202d350cd5f34cacee17157d3347b"}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x2040, 0x44200) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400042, 0x0) (async, rerun: 64) close$fd_v4l2_buffer(r0) (rerun: 64) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0xfff, 0x3, 0x4, 0x40, 0xffff0001, {r3, r4/1000+60000}, {0x4, 0x8, 0x1, 0xff, 0x4, 0x1, "b2c1e207"}, 0x80000000, 0x4, {}, 0xff, 0x0, r0}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x2040, 0x44200) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/mnt\x00') (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5a, 0x7, 0xb7b, 0x1, 0x9, "57248e0e7d939e2cf76a98058145f8d2cf2632156a63db33acdc03f910d2c448bb2447fb70be7001ce4e987125c9bf55b40d0402307ba11eb09ad698083a2280074d461f909eb21d7082658ff87b4f0fdc74b6802e7a34d8460fdcc2579d5c5e1b966f38992aa75e8b79a2b58760439e300202d350cd5f34cacee17157d3347b"}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @remote, {[@noop, @lsrr={0x83, 0x27, 0x8c, [@empty, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @empty]}, @end, @rr={0x7, 0x7, 0x82, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010100, 0x18, 0x14}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r2}) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1) syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@empty}, {@multicast1}]}}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x8, 0x8, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "4812c17825fca03f"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000815) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xd42) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/mnt\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5a, 0x7, 0xb7b, 0x1, 0x9, "57248e0e7d939e2cf76a98058145f8d2cf2632156a63db33acdc03f910d2c448bb2447fb70be7001ce4e987125c9bf55b40d0402307ba11eb09ad698083a2280074d461f909eb21d7082658ff87b4f0fdc74b6802e7a34d8460fdcc2579d5c5e1b966f38992aa75e8b79a2b58760439e300202d350cd5f34cacee17157d3347b"}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xd42) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xd42) (async) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @remote, {[@noop, @lsrr={0x83, 0x27, 0x8c, [@empty, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @empty]}, @end, @rr={0x7, 0x7, 0x82, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010100, 0x18, 0x14}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r2}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@empty}, {@multicast1}]}}) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x8, 0x8, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "4812c17825fca03f"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000815) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x18900, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x358, 0x7fffffff, 0x812, 0x1, 0x7fffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x18900, 0x0) (rerun: 32) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x358, 0x7fffffff, 0x812, 0x1, 0x7fffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xd42) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @remote, {[@noop, @lsrr={0x83, 0x27, 0x8c, [@empty, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @empty]}, @end, @rr={0x7, 0x7, 0x82, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010100, 0x18, 0x14}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r2}) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1) syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@empty}, {@multicast1}]}}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x8, 0x8, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "4812c17825fca03f"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000815) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x65, 0x0, 0x7f, 0x4, 0x0, @empty, @remote, {[@noop, @lsrr={0x83, 0x27, 0x8c, [@empty, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @empty]}, @end, @rr={0x7, 0x7, 0x82, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=0x64010100, 0x18, 0x14}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r2}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r1) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x40, 0x0, [{@remote}, {}, {@empty}, {@multicast1}]}}) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x8, 0x8, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "4812c17825fca03f"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000815) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) (async) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@multicast1}, {@dev}, {@remote}, {@broadcast}, {@local}, {@multicast1}]}}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x18900, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x358, 0x7fffffff, 0x812, 0x1, 0x7fffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@multicast1}, {@dev}, {@remote}, {@broadcast}, {@local}, {@multicast1}]}}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@multicast1}, {@dev}, {@remote}, {@broadcast}, {@local}, {@multicast1}]}}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x0, 0x9, 0xff, 0x1000, 0x9, &(0x7f00000006c0)="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"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x5, 0x10, [0x1, 0xfffffffc, 0xffffffe1, 0x2]}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34a02) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x1ff, 0x3a, &(0x7f0000000040)="31a09188b42b8b174c19d88a3f65ca039d401bada22b64060eee0397c0e89f31a30adb3d0b0e247dd4ac9589ee074ab793e558679727a0bae510", 0x0, 0xaa, 0x0, 0x5, 0x4, 0x3, 0x27, 'syz0\x00'}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x0, 0x9, 0xff, 0x1000, 0x9, &(0x7f00000006c0)="2304940ae99b18b5ad35117100dc9b490bbe785f32930021e9f55ef91f8ab54111a945e5bb51fc925af84bf2aa1ce6ab98e5174445a3decfcb253cfbb0717956e5f56701612cd9d6ae90dd847cad2fab8ae0fd839d3e3f87e9480428b12847a6b5c6e3fd453d7cde3dd0fe959438d9f51354fddac4c0dfc0953e4499429d19e566c378a070bc8c6e7623fe3dcb09978539a1b51879357ed95e53b9eea66522b7fbc0d509a797e17600d5cbc131f8b707b11ff2a8c1694e89e1742df380e943eeb58745467a32cb778c159ed4937c571d45bfa7d15e3cf9e3eb1276a33f62a49f98838aefaeea372c890abe79529b1fd2dcb5295fe2eab1b7e56f0bcf4af6f89766cb5f158bbab0c45d9ba383032c5fdd1ab094fe3dd61487b2bd6d9beb70e4bccc886eadb7bfbc6b7d5f59a09d92eecae41e054f00b5ae357c3aac7786793a2a42e16cb3e99a27783b4e7de7bca3632d7db8f49183211f2fc1f7cc425dd5f537d7d60cfde8995ae7fbd2f840897261c076ac84b3259ea1be6b3d2f075d965c5250abb1c4b096603a810099baafd1bb55eb3c71a15a4df0671812bab8e927120a8a3bcfad73ab955ba91e34bc5e140a0f29277b95daecf32c49b6bc78496959a589eb4057969a00889a13355b3bda1213dd008c497d638cc992c53378fcd9e97eb5daf14e0cc421bfcd8e603ecf8a1f877eae2c9785660057be7631bdfa35fd333eac015b0295e3b64fd9f19b726bdd5bb998102b1ef5f322937e0e3d033aeabf78e4b35730a8947739331e4e50aa1d93a3a581a8c61c64dab73c842772cda662bca0eab939246691060bb6b2660bfd6a4a04ebc365234b67c08a0f68bbeb3c873111c3dd2d9cd7cd64d268cd1ff81f00f650353f90e8ba43dd59cb17ca3eb47269bc9240052230fcb7b730da234442f43768f0f6688f662c60bdfb492b2828a14b533dd2ce34239ef7f596376518d29dea87be6decb2337fa4ae47e5e5a5bac0d50c24c1d256ca30fc474b50b1235f6cf987c60417755a95c7dfac77f855bf79d655a0fc0509d103ed9103ff81935f22206bf26b848a9d7f13867c06a3f1421a4853b7d32f66dc012d8a3863b6b13cae523054c2c5501ec42b7ccd7285b55992e3fede8a5dea6d7f383253a2b95a582f7e1fb511932a8b808aafd75db1f44ab5162e952f93fe49eee576b5d6c2929f8317e6ffcca4eadb4c0012db00a95fa36335a91a767e16e7a903630d12951bc85637c51000b341238a8ad16e533e03b5ec8864feedff4d5437a236fa69a9b90998916f0c92f6b457ad36632fb6535e6e85d6a31bd9918f08a17adda4b8ed8f56a55a3fe4c0f4ee63e495c438f40d5b50aa73f785a60646992e519ceed0584765316c5ac04a5f7415366e2c4ea9e70e75b018ab4c769a78b0dc9661995c49b4ababb548f6fb49f670e915a749ec26939dea5df018661619e6479e4743db1aae016b42c4e992c0229226b7e90381cd0f57c69a9388ea5dc5d9b8d760d8094c98c936936f485beeeab3ff456caa4f7ba2d90d096f6dc1d5b5e9590feaeea6e8d07cc86443c51a95935508641734af0cbfc5de2f1941026187a12a25f2ad4d6c86ba5cfc46d5386b71397b2712a1104c7fda413bea1c41a848b95dbda920befe5c975892090dc40a63270b74265d6d37501bc5397b2945b65c455eb8ed1696c251c8b889c16781fcddf7c82c8a4660a3291687b71d1d115dcbbbc8b7fe9257ed2c5b46faa936158fc18976881db4b90f0cbacfedfe9bc56c9070ccee9e0672ed2a02ad1808a2b40500a4109991abc5857156f6fef31bc42f6d9467dfacdfaf04f93088711c5d041849988af5e52d2980d56ed6786785bbe88a538f6e033ab4a52d7b514e60979f60b85ba19784d7d15e0c11a08c336c4e65bfeea090486b2be3dbc5f978fcdbf14c7335fddf8cf092972bebc41c1b17f481729583929c7bea61496e180f84db07537f4bcca7f2653303c6199e5bdad03322d8f172ae7ab45a6ba4af5860f0fcb06b34c9430d9406d2b34812ae862739a0c253510d8229fd1fffd7d333ab3947cd3091a8467094eebff565b5fd62a337e598e486fa2b399cdc7b6c804e4cc71ed0528056469a2551d05aa219e4abf8963562e3f92cad83875d7218a54b3ff9919179c43ea7301d5559d05bafd95034e133440da21fee3e4a9854db17b135e3b40fb29351292c17a1ec0a55a4a47ff6c3644ab278ea26e4b68570e606db3038b1e530fdc0c1bbbdac21c21bdd94fd9ad732181194f10331e0218609b7c6e8822fb644d5a90448da3492bf81c522e99162f10b32bad34423670b4099972e8805aed71714984d6c951e48f9b90f08ac976f39cd2d38232d80fbb1cbccfdac0da336be1dd6d836de58ca30fd45b2b8c8ceb2d266558dd82dfb3aefa32f1076f14b41cf34185bb624b6d909dfc5b5034ced3ba855d2bcce381ee15a46afc1b14337dca357d260ae0ccd4ae95c56adbb396909c7190bdd13efbbe3502df2fbabeeb9bda0998aef6d530af0beae8ededec7683f47eebf22f69446b317aa9914389ab8b6de103bd6cea9359eeec26b63cece52f411db6e5b0827be6e8f19669c9e4db50c5225d4290108db9dc6912bb6f3dacbfe1d76a1caaf60c12f994bc5c8f59c9f4fdd33bc222d83aef66693ddffb6b904475e23d93d88b0278a398cf009373e47957b3ba4bdb0b9724de8e0af6f0f950ec196626aa30650a74ac475750b5d684337cff129ced0a804515abddc6d89e079f29b7e0c77697e4a84ad0bc23e2bb5a4bfff459b526d651e8dd21a8ff42c920940c241ca9bee539fa03a524dddc48728f48f28a19e64c19e52e520604d1c8c146aff7b48440e29c028b68e0baf0eac351a74fce34feaa8f68d96983fa081d2275980f4eb977196502aef9582c189170e366fd99606938a8306a87c5f9776dcd19e4fc39635020845111a5a43b9b096ed23479131b4f62d798fc931324a4797e4eb6f361f01d6848f380fdf3676f5ed6c5d78e1b449faccb51b00f4fb9e192a7ed293ead6dc106cce474a41aa8e359a6d13faf1750369a05214948f3094882d01abe02db38ee49470f7becee68ba04846f3f194222b5ec3fcc90ce0520a08f83f764fe0851bd1018926d86375a3550c0f3037712710c043b3dd442ed1e428bd1795cb32006f9791cc29ce6bb1bd7c3240e057d6d917088471e79af46255895cf661c2bc61c4cbe4bd4f1db21d0c5bc0c2d388d5537f2367f3f125fb41c378dc5e0781ca89bc7ce6e3e531c6a8b691cd14f68e984fa1bc286f590ab44b850e7753b78b4196653fb16cdd4c583e11dbaeb874f521234542cf522f6d7108fff2199fb43d536f45a4b111c9bcbb2cde3901548585f9258c54e1754ee79dbd153d5d2cb34b3704abdd417fccc599093338d2e05ce2cec1a485450bbc0ab6a4795c888e7fef684d7e2b280ee12dfb2bcfe13e3a54d1b557b597bf313689e985da666c466469935fd18b20f39514d2a848a6a7471caa0c03b39f80f7efb9b5632c5d5a536e5310aeb0c1e7cded69343808236f5292d06fefb1290adeb50a7edbc1528af3d742c17adf68afce365d10ffc0becd93c652eb8b316dd036170dfa1fa7edd5b35e52944dbdfd6eeca1fce8396c781c9c5d4d1c1cf7219a73b600c0bad5489a0ed63759343ef45bc8aaac57920f0d366ce2e02ce0fb26dd0352feaca65b9def19b7f03e66326e03f708bd782116ab283414b020a25aed9a3fa862fc5baeb0605bd47970919723a40c65e3695f472c4c949c8de23d97366047274925307f0f0a70301f7904c3accb5625164d6f541049abd610211d43aba4b7d81360457367c52aa98bf0b62d3a26f84115c05f7ac8d2cabe461ddc599e413bf38a1070c273247ada0780e8131f6dc74231634399c6cb6d4d60c913185013fb627c9ac8c136251a33c084fed34599029c84f1097c09997ee56c65edd9a36478db16b01a07b8fe44e3a7d8065d32f6f60e7b839e75b3fd05eacf79a50d01b14b30d0cdcc622990b2678f4d8cb488eec44122b17e3707897b65ad11703dc26643639e0ead1c6c04982e9e41f1acdfe32c21041cb9011b5fc3a28d44bd8a9a62f41c04fe3c99f30a2fb5de3add1f40d17f706f0bb2ed7cc457e96dc9114dbf93fe161a2eef6ebf7f041fde24477c49a23e948087370b2dc87f665143bf4692fffac4971f4c626eb0fee9298066c1f5bd6e7493403e7e74bc4aafa3b07c0b0faf75dfdfd3d59dd8f48615f64ac8ba9b1d0e018d9443a89453815ca9c8256e592a29d1f8d5dd9f21554a5db6ad473e405ff5295da86aaaff707aece9173a959277cf8b8509cc70e850fee779cb3779f996fa8dadbff9c1aeff1beff0aa8ba5dd29e5b0c3dfaffccf076b59fb7e2966f5ce9fb56408d6f0d17c2383d77fffb5be67a3cebffd73d0c2fb60bd2728f1d8ed909da1739dce6cea00caeb1a2a725e7d16fb3a1c24c3a6d7cfbe1537da01bbf88603f0053e6bb4b68f687dd2fb32feb9b48780312ae0fa888a9b8f42a20706a9883daa6dac3efca52b62e44cbf1f6d594cf53c4026e2d4fb47806fa5b8762d498908b83cb836f88aa3c5af0accdb545b3465d170efeeefdfcf90c31f3548a0b01b1458483f1b02ea6c9114f734e2fe1be2455827be1353b30583a0d6ae8cd239b050401f682aeee9cd2b5b7ed3f1f3e3f8370889a31bd1702a1a05dca04574bc8bb8e54ce5839443b20e44055525d5bb348a859d1d826ce528d9236fd8beaa13a56c1613077875c73d54cc230e977a79f1311b502dc90c15ecb0e408d553444ec00327c0c97a7c6a40e0cd231401943d656bb3518ea5866a2fe372c32187a454742577bdbb9a76a4ddba8e8fdce8026c44b7d3bed2a0954568f7f8cb5eafbaed7ef6a931af61e88403ef49a0b3dfc96dedecdcb91bc9ab013d5901263d6bff51866efa58fa28fe34bfe90db36243108f3ea60cb779512902ba58a3eae7eb1c26dba5d4dc22dc6ab436b8fe8d31830833ae312e8737adda82ee8c6f383fb12ba15977c5df5eca411c326cd5e495f51ed13374e75f6bcb999ee8b655dbe594e6b0526dcb49c8228f8dbad9beb659ab5423316a98b921835b89c9c8058fce10c0f3c9361819e1c616c0668583ec954617d53c7664ecf1a69aca119b0b7a6a4cd8d96f1a8fc3bad8c97d90d899fb426ae6bc1e4b89308c3a63cc682859985a8efa2b37f319734a4f5386861ed31c4ec765ce3924e9566cb76a7e1036b50db942ddd10bf91cdc94c2711268ebce77ca136d21904cb5a7a58024e3e5c11671928ccc5a0b8e607a8787b4abcc28742b989ce8154dc08a1e1ca1ffcef2d520e8b51d3c97932eab4a232e08b86b382a9f1ce6a5d0ad5bd6febd1d64f54fc6fba094382c9171599fdbc6345206e4d3d82e57ad0a789696b8ebc232c6889ca2118e5ac33fa8d9ecb19f9564563c6397c122b73aef1b1623ddba37b7025e1e7ef9f4fef95c70388ab2d7d5246dc81addc03972cc2ba338215dd62d357a1c44075c31786780c7257c96cd17df9067f66c1ade6b5d30d11177a432de8c48f49795b43941b626717503986eb4207d15dbad2dafbd30492fb5bd9137f5b7357c60a98dacdaf9da0a3a5038f0cfe27ea7d3dc5ac3a433bccf02274949a6a0d85dc34cf3a3ca0e622d25b80d7f2221ea64c3b2e42b7226c932c5bedfee1f0ef2e38f3eec95b33df05c3bc47d46b89345dc888164fcd1b88a804e67ed7eeab87370b06303894ed6d323c6578d8660a5a167e49866af805ea5197d4d12baa571358f"}) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 64) close$fd_v4l2_buffer(r1) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x5, 0x10, [0x1, 0xfffffffc, 0xffffffe1, 0x2]}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@multicast1}, {@dev}, {@remote}, {@broadcast}, {@local}, {@multicast1}]}}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@broadcast, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@multicast1}, {@dev}, {@remote}, {@broadcast}, {@local}, {@multicast1}]}}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34a02) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x1ff, 0x3a, &(0x7f0000000040)="31a09188b42b8b174c19d88a3f65ca039d401bada22b64060eee0397c0e89f31a30adb3d0b0e247dd4ac9589ee074ab793e558679727a0bae510", 0x0, 0xaa, 0x0, 0x5, 0x4, 0x3, 0x27, 'syz0\x00'}) 07:02:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x305580, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x9, 0x2, 0x9, 0x5, 0x800}) 07:02:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x60, 0x0, 0x9, 0xff, 0x1000, 0x9, &(0x7f00000006c0)="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"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x5, 0x10, [0x1, 0xfffffffc, 0xffffffe1, 0x2]}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x305580, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x9, 0x2, 0x9, 0x5, 0x800}) 07:02:29 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34a02) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x1ff, 0x3a, &(0x7f0000000040)="31a09188b42b8b174c19d88a3f65ca039d401bada22b64060eee0397c0e89f31a30adb3d0b0e247dd4ac9589ee074ab793e558679727a0bae510", 0x0, 0xaa, 0x0, 0x5, 0x4, 0x3, 0x27, 'syz0\x00'}) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000003c0)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2003000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004003}, 0x40) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0x401, 0x1, {{0x21, 0x4, 0x2, 0x2, 0x84, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0xb, 0x9, [@rand_addr=0x64010101, @multicast1]}, @noop, @generic={0x89, 0x2}, @cipso={0x86, 0x24, 0x3, [{0x7, 0xa, "b76f2c396333b4ba"}, {0x0, 0x4, "b3a8"}, {0x5, 0x10, "604773bde0fd8206e1ee9d976462"}]}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x5, [{@multicast1, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80000000}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x20}]}, @end]}}}}}) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) socket$bt_bnep(0x1f, 0x3, 0x4) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2, 0x4}, 0x10) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x400}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x305580, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x9, 0x2, 0x9, 0x5, 0x800}) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000003c0)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2003000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004003}, 0x40) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0x401, 0x1, {{0x21, 0x4, 0x2, 0x2, 0x84, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0xb, 0x9, [@rand_addr=0x64010101, @multicast1]}, @noop, @generic={0x89, 0x2}, @cipso={0x86, 0x24, 0x3, [{0x7, 0xa, "b76f2c396333b4ba"}, {0x0, 0x4, "b3a8"}, {0x5, 0x10, "604773bde0fd8206e1ee9d976462"}]}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x5, [{@multicast1, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80000000}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x20}]}, @end]}}}}}) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) socket$bt_bnep(0x1f, 0x3, 0x4) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2, 0x4}, 0x10) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x0, 0x1ff, {0x54, 0x4, 0x3, {0x3, 0x6}, {0x3, 0x1}, @rumble={0x1, 0x6}}, {0x52, 0x81, 0x1, {0x9, 0x4}, {0x8, 0x4}, @period={0x5b, 0x3, 0x3, 0x5, 0xff, {0x100, 0xff, 0x6, 0xff00}, 0x1, &(0x7f0000000000)=[0x8]}}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x30, 0xb8c00) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x400}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x400}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)={r2}) (async, rerun: 32) socket$bt_bnep(0x1f, 0x3, 0x4) (rerun: 32) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2, 0x4}, 0x10) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x400}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x0, 0x1ff, {0x54, 0x4, 0x3, {0x3, 0x6}, {0x3, 0x1}, @rumble={0x1, 0x6}}, {0x52, 0x81, 0x1, {0x9, 0x4}, {0x8, 0x4}, @period={0x5b, 0x3, 0x3, 0x5, 0xff, {0x100, 0xff, 0x6, 0xff00}, 0x1, &(0x7f0000000000)=[0x8]}}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x30, 0xb8c00) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x0, 0x1ff, {0x54, 0x4, 0x3, {0x3, 0x6}, {0x3, 0x1}, @rumble={0x1, 0x6}}, {0x52, 0x81, 0x1, {0x9, 0x4}, {0x8, 0x4}, @period={0x5b, 0x3, 0x3, 0x5, 0xff, {0x100, 0xff, 0x6, 0xff00}, 0x1, &(0x7f0000000000)=[0x8]}}}) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) (async) syz_open_dev$usbfs(&(0x7f0000000340), 0x30, 0xb8c00) (async) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) (async) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000003c0)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2003000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004003}, 0x40) (async) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r6) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0x401, 0x1, {{0x21, 0x4, 0x2, 0x2, 0x84, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0xb, 0x9, [@rand_addr=0x64010101, @multicast1]}, @noop, @generic={0x89, 0x2}, @cipso={0x86, 0x24, 0x3, [{0x7, 0xa, "b76f2c396333b4ba"}, {0x0, 0x4, "b3a8"}, {0x5, 0x10, "604773bde0fd8206e1ee9d976462"}]}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x5, [{@multicast1, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x80000000}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x3f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x20}]}, @end]}}}}}) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x0, 0x1ff, {0x54, 0x4, 0x3, {0x3, 0x6}, {0x3, 0x1}, @rumble={0x1, 0x6}}, {0x52, 0x81, 0x1, {0x9, 0x4}, {0x8, 0x4}, @period={0x5b, 0x3, 0x3, 0x5, 0xff, {0x100, 0xff, 0x6, 0xff00}, 0x1, &(0x7f0000000000)=[0x8]}}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x30, 0xb8c00) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) 07:02:30 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000740)}) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = socket(0x21, 0x6, 0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x14, 0xa8, @random="7d0d2be992eb0422701d68355c48350d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200000000000000072501000000000006003f00000014002000000000000000000000000000000000010c0010000000010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60c0}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x3, 0x1}) 07:02:30 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000740)}) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = socket(0x21, 0x6, 0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x14, 0xa8, @random="7d0d2be992eb0422701d68355c48350d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200000000000000072501000000000006003f00000014002000000000000000000000000000000000010c0010000000010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60c0}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) socket(0x21, 0x6, 0x6) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x14, 0xa8, @random="7d0d2be992eb0422701d68355c48350d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40008) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200000000000000072501000000000006003f00000014002000000000000000000000000000000000010c0010000000010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60c0}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x3, 0x1}) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delnexthop={0x40, 0x69, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x80000001, &(0x7f0000000100)=[{}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x400, 0x0, {r2, r3/1000+60000}, {0x1, 0x6, 0x20, 0x9, 0xd3, 0x1, "8961dde0"}, 0xffff3064, 0x4, {}, 0x0, 0x0, r0}) 07:02:30 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000740)}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000740)}) (async) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x3, 0x1}) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delnexthop={0x40, 0x69, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x80000001, &(0x7f0000000100)=[{}]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x400, 0x0, {r2, r3/1000+60000}, {0x1, 0x6, 0x20, 0x9, 0xd3, 0x1, "8961dde0"}, 0xffff3064, 0x4, {}, 0x0, 0x0, r0}) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = socket(0x21, 0x6, 0x6) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x14, 0xa8, @random="7d0d2be992eb0422701d68355c48350d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40008) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000003c0)={0x3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200000000000000072501000000000006003f00000014002000000000000000000000000000000000010c0010000000010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60c0}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delnexthop={0x40, 0x69, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x80000001, &(0x7f0000000100)=[{}]}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3, 0x2, 0x4, 0x400, 0x0, {r2, r3/1000+60000}, {0x1, 0x6, 0x20, 0x9, 0xd3, 0x1, "8961dde0"}, 0xffff3064, 0x4, {}, 0x0, 0x0, r0}) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x301}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa214}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x8001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000400)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa214}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x8001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000400)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa214}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x8001) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000400)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) (async) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x301}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x600180) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r1) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa214}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x8001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000400)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa214}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x8001) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000400)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) (async) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x301}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x301}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x600180) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x100, 0xa8, @random="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"}, @handle=@pci={{0x8}, {0x11}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) (async) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async, rerun: 32) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x600180) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r1) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) (async) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x100, 0xa8, @random="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"}, @handle=@pci={{0x8}, {0x11}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) (async) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x100, 0xa8, @random="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"}, @handle=@pci={{0x8}, {0x11}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000280)) (async) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x100, 0xa8, @random="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"}, @handle=@pci={{0x8}, {0x11}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x305202) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket(0x1a, 0xa, 0xffff33db) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x305202) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) 07:02:30 executing program 2: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket(0x1a, 0xa, 0xffff33db) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket(0x1a, 0xa, 0xffff33db) (async) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 2: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) close$fd_v4l2_buffer(r0) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x305202) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xe50d264ce314a7b8, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x400000000000000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) socket(0x11, 0x5, 0xfffff624) socket(0x1, 0x5, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000240)="4e08040dbe75abb64c2cef19c927e07e25e71d9c57fb828241993baac103efe0d2a33cb95e3059f29dbdd77faee8ab6c5f41d060ddb15b00695696a94382d9d50695396d79040072b365fe8a0e921c60224e5035d5d600e66f958dc9f1f4877a473933f773d518caccc10947d493a817eb08755f542755d1c032f810b91380e49ae6cbb226dd87db6e9f9eec7b3c682df7", &(0x7f0000000100)=@buf="730fd6ec3d0f1b9830b26658880a069ad4cc4550dabfb7e77a43670f23b160f1f468094a1722221657d111dddc436ce26bffdc0814c8f5396679009543ec59191515d777fdca9497ad4da3b52a58e3c247fac1111a7370fe6557bdf73fbfbb1ec8a92d71ca39ae31bf589b57be61ee46517f2720a0914743", 0x1}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x4, 0x20, 0xfffffffffffffffb}, 0x2f) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket(0x1a, 0xa, 0xffff33db) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket(0x1a, 0xa, 0xffff33db) (async) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:30 executing program 2: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) (async) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:30 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xe50d264ce314a7b8, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x400000000000000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) socket(0x11, 0x5, 0xfffff624) (async) socket(0x1, 0x5, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000240)="4e08040dbe75abb64c2cef19c927e07e25e71d9c57fb828241993baac103efe0d2a33cb95e3059f29dbdd77faee8ab6c5f41d060ddb15b00695696a94382d9d50695396d79040072b365fe8a0e921c60224e5035d5d600e66f958dc9f1f4877a473933f773d518caccc10947d493a817eb08755f542755d1c032f810b91380e49ae6cbb226dd87db6e9f9eec7b3c682df7", &(0x7f0000000100)=@buf="730fd6ec3d0f1b9830b26658880a069ad4cc4550dabfb7e77a43670f23b160f1f468094a1722221657d111dddc436ce26bffdc0814c8f5396679009543ec59191515d777fdca9497ad4da3b52a58e3c247fac1111a7370fe6557bdf73fbfbb1ec8a92d71ca39ae31bf589b57be61ee46517f2720a0914743", 0x1}, 0x20) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x4, 0x20, 0xfffffffffffffffb}, 0x2f) 07:02:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:30 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0xe50d264ce314a7b8, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x400000000000000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) socket(0x11, 0x5, 0xfffff624) socket(0x1, 0x5, 0x6) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000240)="4e08040dbe75abb64c2cef19c927e07e25e71d9c57fb828241993baac103efe0d2a33cb95e3059f29dbdd77faee8ab6c5f41d060ddb15b00695696a94382d9d50695396d79040072b365fe8a0e921c60224e5035d5d600e66f958dc9f1f4877a473933f773d518caccc10947d493a817eb08755f542755d1c032f810b91380e49ae6cbb226dd87db6e9f9eec7b3c682df7", &(0x7f0000000100)=@buf="730fd6ec3d0f1b9830b26658880a069ad4cc4550dabfb7e77a43670f23b160f1f468094a1722221657d111dddc436ce26bffdc0814c8f5396679009543ec59191515d777fdca9497ad4da3b52a58e3c247fac1111a7370fe6557bdf73fbfbb1ec8a92d71ca39ae31bf589b57be61ee46517f2720a0914743", 0x1}, 0x20) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x4, 0x20, 0xfffffffffffffffb}, 0x2f) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:31 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000140)=0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:31 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000140)=0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000140)=0x8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) (async) 07:02:31 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x0, 0x3f, {{0x16, 0x4, 0x0, 0x12, 0x58, 0x78, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3c, 0x1, [{0x2, 0x5, "fc7a35"}, {0x0, 0xa, "492ba27af487c097"}, {0x7, 0x4, "1884"}, {0x0, 0x6, "646dc58e"}, {0x5, 0xd, "b8090c5075c7bea0800fe4"}, {0x0, 0x10, "600865abdf368805a0da4d81c0b8"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x1, 0x7800, 0x7, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @loopback, {[@generic={0x83, 0x5, "f20e13"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xea, [@multicast1]}, @lsrr={0x83, 0x1b, 0x92, [@rand_addr=0x64010102, @multicast2, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100]}]}}}}}) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) (async) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000140)=0x8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) 07:02:31 executing program 4: syz_open_dev$sndctrl(0x0, 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x0, 0x3f, {{0x16, 0x4, 0x0, 0x12, 0x58, 0x78, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3c, 0x1, [{0x2, 0x5, "fc7a35"}, {0x0, 0xa, "492ba27af487c097"}, {0x7, 0x4, "1884"}, {0x0, 0x6, "646dc58e"}, {0x5, 0xd, "b8090c5075c7bea0800fe4"}, {0x0, 0x10, "600865abdf368805a0da4d81c0b8"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x1, 0x7800, 0x7, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @loopback, {[@generic={0x83, 0x5, "f20e13"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xea, [@multicast1]}, @lsrr={0x83, 0x1b, 0x92, [@rand_addr=0x64010102, @multicast2, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100]}]}}}}}) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x401, 0x60100) read$usbfs(r1, &(0x7f0000000080)=""/57, 0x39) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x28, 0x6, {{0x2b, 0x4, 0x0, 0x3b, 0xac, 0x64, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@end, @generic={0x82, 0x12, "0000f40500000000000000bf29e84db6"}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x3, [{@multicast2, 0x6}, {@multicast1, 0x2}, {@local, 0x6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x62}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@rand_addr=0x64010102, 0x5}]}, @rr={0x7, 0x13, 0x94, [@local, @local, @remote, @rand_addr=0x64010102]}, @end, @generic={0x7, 0x11, "c753718978cc6d27c0a74f29c6f422"}, @timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0x2, [{@local, 0x9}, {@rand_addr=0x64010101, 0xfc}, {@multicast1, 0x8005}, {@loopback, 0x10000}, {@multicast1, 0x4}]}]}}}}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(0x0, 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x401, 0x60100) read$usbfs(r1, &(0x7f0000000080)=""/57, 0x39) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x28, 0x6, {{0x2b, 0x4, 0x0, 0x3b, 0xac, 0x64, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@end, @generic={0x82, 0x12, "0000f40500000000000000bf29e84db6"}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x3, [{@multicast2, 0x6}, {@multicast1, 0x2}, {@local, 0x6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x62}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@rand_addr=0x64010102, 0x5}]}, @rr={0x7, 0x13, 0x94, [@local, @local, @remote, @rand_addr=0x64010102]}, @end, @generic={0x7, 0x11, "c753718978cc6d27c0a74f29c6f422"}, @timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0x2, [{@local, 0x9}, {@rand_addr=0x64010101, 0xfc}, {@multicast1, 0x8005}, {@loopback, 0x10000}, {@multicast1, 0x4}]}]}}}}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x401, 0x60100) (async) read$usbfs(r1, &(0x7f0000000080)=""/57, 0x39) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x28, 0x6, {{0x2b, 0x4, 0x0, 0x3b, 0xac, 0x64, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@end, @generic={0x82, 0x12, "0000f40500000000000000bf29e84db6"}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x3, [{@multicast2, 0x6}, {@multicast1, 0x2}, {@local, 0x6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x62}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@rand_addr=0x64010102, 0x5}]}, @rr={0x7, 0x13, 0x94, [@local, @local, @remote, @rand_addr=0x64010102]}, @end, @generic={0x7, 0x11, "c753718978cc6d27c0a74f29c6f422"}, @timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0x2, [{@local, 0x9}, {@rand_addr=0x64010101, 0xfc}, {@multicast1, 0x8005}, {@loopback, 0x10000}, {@multicast1, 0x4}]}]}}}}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) (async) close$fd_v4l2_buffer(r0) (async) 07:02:31 executing program 4: syz_open_dev$sndctrl(0x0, 0x8, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x0, 0x3f, {{0x16, 0x4, 0x0, 0x12, 0x58, 0x78, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3c, 0x1, [{0x2, 0x5, "fc7a35"}, {0x0, 0xa, "492ba27af487c097"}, {0x7, 0x4, "1884"}, {0x0, 0x6, "646dc58e"}, {0x5, 0xd, "b8090c5075c7bea0800fe4"}, {0x0, 0x10, "600865abdf368805a0da4d81c0b8"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x1, 0x7800, 0x7, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @loopback, {[@generic={0x83, 0x5, "f20e13"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xea, [@multicast1]}, @lsrr={0x83, 0x1b, 0x92, [@rand_addr=0x64010102, @multicast2, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100]}]}}}}}) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x401, 0x60100) read$usbfs(r1, &(0x7f0000000080)=""/57, 0x39) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x28, 0x6, {{0x2b, 0x4, 0x0, 0x3b, 0xac, 0x64, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@end, @generic={0x82, 0x12, "0000f40500000000000000bf29e84db6"}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x3, [{@multicast2, 0x6}, {@multicast1, 0x2}, {@local, 0x6d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x62}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x7, [{@rand_addr=0x64010102, 0x5}]}, @rr={0x7, 0x13, 0x94, [@local, @local, @remote, @rand_addr=0x64010102]}, @end, @generic={0x7, 0x11, "c753718978cc6d27c0a74f29c6f422"}, @timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0x2, [{@local, 0x9}, {@rand_addr=0x64010101, 0xfc}, {@multicast1, 0x8005}, {@loopback, 0x10000}, {@multicast1, 0x4}]}]}}}}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) close$fd_v4l2_buffer(r0) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xed0e}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000280)) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000100)={0x9, 0x80, {0x57, 0x7fff, 0x3317, {0xff, 0x8f8}, {0x76, 0x400}, @rumble={0x3, 0x2a6}}, {0x53, 0x40, 0x1, {0x7ff, 0x4}, {0xfffe, 0xcc86}, @ramp={0x0, 0x7, {0x401, 0x741c, 0x1, 0x8}}}}) r6 = socket(0x28, 0x800, 0x4) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x42000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xed0e}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000280)) (async, rerun: 32) close$fd_v4l2_buffer(r0) (rerun: 32) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000100)={0x9, 0x80, {0x57, 0x7fff, 0x3317, {0xff, 0x8f8}, {0x76, 0x400}, @rumble={0x3, 0x2a6}}, {0x53, 0x40, 0x1, {0x7ff, 0x4}, {0xfffe, 0xcc86}, @ramp={0x0, 0x7, {0x401, 0x741c, 0x1, 0x8}}}}) (async, rerun: 32) r6 = socket(0x28, 0x800, 0x4) (rerun: 32) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (rerun: 64) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x5, 0x18, [0x3ff, 0x1, 0x4f0, 0xffffffff, 0x80, 0x7]}) close$fd_v4l2_buffer(r0) 07:02:31 executing program 2: close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x5, 0x18, [0x3ff, 0x1, 0x4f0, 0xffffffff, 0x80, 0x7]}) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x1) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x5, 0x18, [0x3ff, 0x1, 0x4f0, 0xffffffff, 0x80, 0x7]}) (async) close$fd_v4l2_buffer(r0) (async) 07:02:31 executing program 2: close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xed0e}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000280)) (async) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000100)={0x9, 0x80, {0x57, 0x7fff, 0x3317, {0xff, 0x8f8}, {0x76, 0x400}, @rumble={0x3, 0x2a6}}, {0x53, 0x40, 0x1, {0x7ff, 0x4}, {0xfffe, 0xcc86}, @ramp={0x0, 0x7, {0x401, 0x741c, 0x1, 0x8}}}}) r6 = socket(0x28, 0x800, 0x4) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x80, 0xc0845) 07:02:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:31 executing program 2: close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x5, 0x18, [0x3ff, 0x1, 0x4f0, 0xffffffff, 0x80, 0x7]}) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x80, 0xc0845) 07:02:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x4, 0x40, 0x27, 0x9, '\x00', '\x00', '\x00', 0x8, 0x5, 0x2, 0xa890, "c74bb2baa74135c0e8c403b5e1d3f7cd"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x80, 0xc0845) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x4, 0x40, 0x27, 0x9, '\x00', '\x00', '\x00', 0x8, 0x5, 0x2, 0xa890, "c74bb2baa74135c0e8c403b5e1d3f7cd"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x4, 0x40, 0x27, 0x9, '\x00', '\x00', '\x00', 0x8, 0x5, 0x2, 0xa890, "c74bb2baa74135c0e8c403b5e1d3f7cd"}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc0845) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x4, 0x40, 0x27, 0x9, '\x00', '\x00', '\x00', 0x8, 0x5, 0x2, 0xa890, "c74bb2baa74135c0e8c403b5e1d3f7cd"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x4, 0x40, 0x27, 0x9, '\x00', '\x00', '\x00', 0x8, 0x5, 0x2, 0xa890, "c74bb2baa74135c0e8c403b5e1d3f7cd"}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc0845) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc0845) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x8, 0xffffffff, 0x64, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x8, [{@broadcast, 0x56}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x48e7}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x25}]}]}}}}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x60e740) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x20400, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0x0) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x8, 0xffffffff, 0x64, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x8, [{@broadcast, 0x56}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x48e7}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x25}]}]}}}}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x60e740) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x20400, 0x0) close$fd_v4l2_buffer(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x8, 0xffffffff, 0x64, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x8, [{@broadcast, 0x56}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x48e7}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x25}]}]}}}}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x60e740) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x20400, 0x0) (async) close$fd_v4l2_buffer(r0) (async) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0x0) 07:02:31 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x8, 0xffffffff, 0x64, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x8, [{@broadcast, 0x56}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x48e7}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x25}]}]}}}}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x60e740) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x20400, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 4: syz_open_dev$sndctrl(&(0x7f00000001c0), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0x0) 07:02:31 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x6125c1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) close$fd_v4l2_buffer(r0) (rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 07:02:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x6125c1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:32 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) close$fd_v4l2_buffer(r0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x6125c1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x800, 0x70bd23, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000814) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000000480)=0x1) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000003c0)=0x1800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @ioapic}) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r3) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r3) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) close$fd_v4l2_buffer(r3) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:32 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0x2, 0x0, 0x85, 0x7fff, '\x00', '\x00', '\x00', 0x9, 0x3, 0x7ff, 0xfffffff8, "beb315d476e6e333e0876e554a7014e3"}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000700)) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000440)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000980)={{0x0, 0x1, 0x9, 0xffff155c, 'syz0\x00', 0x2}, 0x1, [0x10001, 0x6, 0x100, 0x20, 0xe2d, 0x800, 0x8, 0x2, 0x8000, 0xd5, 0x80, 0xb4, 0x8001, 0x2, 0xcd, 0x4, 0xcc7, 0x0, 0x7, 0x0, 0x2, 0x9b, 0x4, 0x9, 0x76, 0x5, 0x9, 0x6, 0x10000, 0x6, 0x3, 0x4, 0x6, 0x400, 0x80, 0x81, 0x7, 0x5, 0x6, 0x10000000000000, 0x3, 0x7f, 0x6, 0x80000000000, 0x3, 0x80000000, 0xccf, 0x1, 0x4, 0x4, 0x1, 0x1, 0xa72, 0x400, 0x1, 0x1, 0x10001, 0x6, 0x3a244876, 0x9, 0x0, 0x92d6, 0x14, 0x7689, 0x4, 0x0, 0x60c2, 0x40, 0x100000000, 0xffffffff, 0x20, 0x6c3, 0x11, 0x4, 0x0, 0x1, 0x970, 0x10001, 0x7f, 0x4, 0x2, 0x2, 0x5, 0x6, 0x0, 0x3, 0x3152, 0x4, 0x4, 0x7c, 0x6, 0xfffffffffffffffe, 0x85e9, 0x9, 0x4, 0x9, 0xff, 0x5, 0x200, 0x7, 0xfffffffffffffff9, 0x1, 0x9c, 0x3, 0x2, 0x7c, 0x1, 0x100000000, 0x9, 0x3, 0x200, 0x0, 0x9, 0x3, 0x6, 0x6, 0xe96b, 0x8000, 0x8, 0x1, 0x3f, 0x6, 0x8, 0x2, 0x8, 0x4000, 0x1, 0x556]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) close$fd_v4l2_buffer(r3) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) close$fd_v4l2_buffer(r3) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x40}}, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x44200) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$dri(&(0x7f00000001c0), 0x4, 0x300) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x2cd, 0x0, {}, {r1, r2/1000+10000}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "0b6ab2facded526c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) close$fd_v4l2_buffer(r0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) close$fd_v4l2_buffer(r0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:32 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x7ff, 0x80) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xa) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x54201) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, 0x0, 0x0) 07:02:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:02:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:34 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:34 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:02:34 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:34 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:02:34 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x94180, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x200000) close$fd_v4l2_buffer(r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x1f04, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {0xfff3, 0xfff1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8a}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0xac, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x2}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xc0}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x20}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x9}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x8001, 0x0, 0x1}}]}}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x101}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x597}]}]}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x790, 0x2, [@TCA_MATCHALL_ACT={0x1c0, 0x2, [@m_ctinfo={0x138, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x20000002, 0x4, 0xfff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x3, 0x8, 0x425b, 0x80}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x40}]}, {0x9a, 0x6, "44519881edd25df50ccf6f8a84b5dd1159e051d8cf37778cbacc4a5ddddfde38cd853319b1da25730079c0bbfcaa5f414751039218f472fc130a891acfde6250365baebec393d2a435d3a58843e485b18fa31b775cff15686ceac3d1b50a12b6bc4795e620c8cc3e9e7af6a526cd76402cc779b9ee710063ad613a50d028abd1f9904a456e9f679b9bb65671cb024b19b3b39ff39f04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x84, 0xd, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x35, 0x6, "09e6f3752ee668064904c827ee588ee5f38f508756025726e115e25e1fc1ab8a1b08ff77534e4781382d43317b80781440"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x5b4, 0x2, [@m_ipt={0x88, 0x10, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xf, 0x6, "565a735e0f01a177154f21"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xf4, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0xaf, 0x6, "fc6e6360a53bfad6504a8568c60c429101eab3b5d797efe8655141027b77aef07c4d99b3b121c85407afaf132b79559c94dd691f32237df2f1cf780f79b3ec6f6974f615020ed866ac614a66bb975d72a3e384a1b50b332d5c89677de08c4071e9add5147d5aca50fa60888525f99182858c97057541d70f4e681b27d01b99cdfb8a3731a916b3e135e459cc18b0aa8720a4d76d3d3ad961a868b0fec1c37b4cced1cf5d45df0538288b74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x10c, 0x1c, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5c, 0x6, {0x0, 'raw\x00', 0x81, 0x101, "e044bc0eb8bf0869e2c24c0811fbb8b6314e8d567e0eac81fedc2329b60ce5b58521cde73c61f01f85e64d3f8c0b76348a20"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x5c, 0x6, "8ee8f048193592adc785024b7408b21a608473d73549806074909f0021c08375c74c69792da244b548b20f1ba82caa11d3c65ec9c9c1c91c085bc87df1a6a833eb14409cfbcc103fe36851fa782ecc86296576960e498da7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xa0, 0x1f, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0xf2b3, 0x20000000, 0x4, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0xc6191298c842585a}]}, {0x33, 0x6, "2e80108044c586c244fc8b834d671cc9ecde87756750850f924002201d1fc7b34d65593d198f55400390429a58093b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xc4, 0x3, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x8, 0x2, 0x1, 0x1ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1f, 0x6, "5171452f73a78039c9fe506d985a293e66adbf62f06071f963ee63"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xd4, 0xf, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xda1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x100, 0x2, 0x400, 0x6}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff9, 0x5, 0x0, 0x7, 0x101}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x15e5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x20, 0x400, 0x1, 0x8, 0x10000}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x718a}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x32}]}, {0x36, 0x6, "fea0864815752579cd8c2eb035c990fddcb412b0f36e4290cc75f3f24fb56b3a9b10d4c73d380e414c16285a768e3c06dfdb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xf0, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x20000000, 0x6, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x35}]}, {0x9e, 0x6, "6e3347ebb849d1ffd9e15baf634fbcc1f5bc75ee01ae3e95cc22bcaa32b3cdca2c92be1eb77a0ce2973e5ec023194ec46ff3f7bde62ef20354fc74aa6a24a39e5d6efda742847d22120cbabe7e479a55bbe2bbab9cf9237d0d08a39a1b54c8afc98e9cf4defbced2fe1ffd9e7720fc23f6a001ba1336b3f4623f4dcc3b2d021b252aa1bf9c9ebae7b16728f393588ed3ea62c4420118e212c85a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x40}}, @TCA_CHAIN={0x8, 0xb, 0x784}, @filter_kind_options=@f_rsvp={{0x9}, {0x164c, 0x2, [@TCA_RSVP_ACT={0xbc, 0x6, [@m_sample={0x5c, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x23}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x401}]}, {0x10, 0x6, "741f2b8662fe5f2b99e8df04"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x5c, 0x13, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "34aeac05e4b4a8a850a9afdc2a0421e8"}, @TCA_CT_LABELS={0x14, 0x7, "696fe4dfe963e34d73f864a438a0f329"}]}, {0xb, 0x6, "60ed7dd90eabab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff2}}, @TCA_RSVP_ACT={0x1584, 0x6, [@m_mirred={0xd4, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x100, 0x5, 0x1, 0xffffffc1}, 0x4}}]}, {0x87, 0x6, "5b3ded72695a87f565d2d35a3e6cf6a74162a68e207f1d666f6b62965e93177a121b2ccd2552f8425ae3c9788e3fa6191127781cd484bf5a047eaae77873805358b9640b82d3276ff111207ac54f74792c0eb949deb4f4ac1eab91adf35616710d1c1319f97583731bf9db728fd743ac04d99fae8c0da9163aad6f52eaeeed07f1f51e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x134, 0x0, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x4, 0x1, 0x3ff, 0x8}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3f, 0x7, 0x0, 0x1}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x200, 0x4, 0x6, 0x6}, 0x2}}]}, {0x5f, 0x6, "fcb8c88b700423819fa207fc40dc40fe53fac10f67759354e2d9e8e5d716bbbebc94515dccba3ae3ebcce600152b80793f1f8e18a009d51a59070c77b6472a1a5ed8824ca3f479366d9a013e6dc5104d14a30c79b6e865ecdffdd5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_mpls={0x120, 0x1f, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x18}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x89bfb}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xcc, 0x6, "12cdac515f7f07bf769f9f6ea822478fcb05f8cb8b5ae4dc11171281843543e870db6a508d013ac3cc0ad961f8c3d442d005543b98cfec5608477b59f66de387ac1c62968d3f7f9c1a2e71bc554905cd4866af2146de8d1878624cdd146fc43b259c7a495ffd7b2847ad466472875bfbed9e92e746b291c86fa336325d41a6a772231ee50d8292c57f7458967733e8a8fa8567a54d4a249370337b245313b2c57b90dfcc7abf19adb1502faf60a15fcea9f126ce5e541acb642e2c699f269f782d4c8366b9aabd68"}, {0xc}, {0xc, 0x8, {0x40ae3f8d7eaca138, 0x2}}}}, @m_csum={0x1068, 0x14, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x20000000, 0xe6a, 0x8}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x6, 0x3, 0xf70}, 0x72}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xc8, 0x16, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}]}, {0x55, 0x6, "7a0174683c153c9a518bee240aaf7d1c56e37b2868cb87c14fa922cda259a10d0f13498ad03f4e3697b7a925da5a795512f50efd4fb9874b7e18bf005cd1eb39eec0806153c9729ba4fedfef9e05b79e85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x128, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x4, 0x8eed, 0x7}}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4e565}, @TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x1, 0xffffffffffffffff, 0x8001, 0x6}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}]}, {0x9a, 0x6, "a6d739dbd72e45fe8537ff1bd1a509e5c9524cc2d7088c16af6e87a9d36ccf5698c0f38fa0671392038cdde3eede05db6e8be16dc51bdcef26084ce9ca6cddfff06476ddc205fa70ecb15fc90f0b3e2730e0dc5c57310e5734deb2bf425b4074974ee1bfd4fc51e77fd8cfeb790263e82b36212aef3254e7c78fbc7190355442b1192185290eb09047ade8ccc8e684e308dd63a5224b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1f04}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) 07:03:14 executing program 3: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0xffff) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x80) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x138) 07:03:14 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 1) 07:03:14 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 1) 07:03:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3071.651742] FAULT_INJECTION: forcing a failure. [ 3071.651742] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.672798] FAULT_INJECTION: forcing a failure. [ 3071.672798] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.684320] CPU: 0 PID: 31519 Comm: syz-executor.3 Not tainted 4.14.301-syzkaller #0 [ 3071.692203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3071.701551] Call Trace: [ 3071.704137] dump_stack+0x1b2/0x281 [ 3071.707768] should_fail.cold+0x10a/0x149 [ 3071.711912] should_failslab+0xd6/0x130 [ 3071.715899] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3071.720620] __vb2_init_fileio+0x17f/0xa90 [ 3071.724881] __vb2_perform_fileio+0x993/0xda0 [ 3071.729365] ? __vb2_init_fileio+0xa90/0xa90 [ 3071.733766] ? aa_file_perm+0x304/0xab0 [ 3071.737729] vb2_fop_read+0x1ef/0x3d0 [ 3071.741518] ? vb2_fop_write+0x3d0/0x3d0 [ 3071.745603] v4l2_read+0x19a/0x200 [ 3071.749144] __vfs_read+0xe4/0x620 [ 3071.752674] ? v4l2_write+0x200/0x200 [ 3071.756460] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3071.761389] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3071.765972] ? common_file_perm+0x3ee/0x580 [ 3071.770284] ? lock_acquire+0x170/0x3f0 [ 3071.774250] ? security_file_permission+0x82/0x1e0 [ 3071.779163] ? rw_verify_area+0xe1/0x2a0 [ 3071.783206] vfs_read+0x139/0x340 [ 3071.786657] SyS_read+0xf2/0x210 [ 3071.790028] ? kernel_write+0x110/0x110 [ 3071.793991] ? __do_page_fault+0x159/0xad0 [ 3071.798222] ? do_syscall_64+0x4c/0x640 [ 3071.802195] ? kernel_write+0x110/0x110 [ 3071.806156] do_syscall_64+0x1d5/0x640 [ 3071.810039] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3071.815221] RIP: 0033:0x7f734242b0d9 [ 3071.818913] RSP: 002b:00007f734099d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3071.826602] RAX: ffffffffffffffda RBX: 00007f734254af80 RCX: 00007f734242b0d9 [ 3071.833858] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3071.841113] RBP: 00007f734099d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3071.848365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3071.855634] R13: 00007fffcff096ff R14: 00007f734099d300 R15: 0000000000022000 [ 3071.862915] CPU: 1 PID: 31522 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3071.870797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3071.880140] Call Trace: [ 3071.882713] dump_stack+0x1b2/0x281 [ 3071.886319] should_fail.cold+0x10a/0x149 [ 3071.890452] should_failslab+0xd6/0x130 [ 3071.894408] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3071.899059] snd_pcm_oss_change_params_locked+0x15c/0x3550 [ 3071.904665] ? __mutex_lock+0x360/0x1310 [ 3071.908708] ? __lock_acquire+0x5fc/0x3f20 [ 3071.912922] ? snd_pcm_plugin_append+0x190/0x190 [ 3071.917664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3071.923098] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3071.928012] ? fsnotify+0x974/0x11b0 [ 3071.931703] ? trace_hardirqs_on+0x10/0x10 [ 3071.935921] snd_pcm_oss_make_ready+0xbb/0x170 [ 3071.940569] ? snd_pcm_oss_sync+0x740/0x740 [ 3071.944878] snd_pcm_oss_sync+0x1be/0x740 [ 3071.949004] ? snd_pcm_oss_sync+0x740/0x740 [ 3071.953302] snd_pcm_oss_release+0x26b/0x2f0 [ 3071.957690] ? snd_pcm_oss_sync+0x740/0x740 [ 3071.961991] __fput+0x25f/0x7a0 [ 3071.965250] task_work_run+0x11f/0x190 [ 3071.969125] exit_to_usermode_loop+0x1ad/0x200 [ 3071.973684] do_syscall_64+0x4a3/0x640 [ 3071.977727] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3071.982893] RIP: 0033:0x7f956e3280d9 [ 3071.986582] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3071.994270] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 07:03:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:14 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 2) 07:03:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3072.001530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3072.008780] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.016026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3072.023273] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 07:03:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 1) 07:03:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3072.103709] FAULT_INJECTION: forcing a failure. [ 3072.103709] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3072.115531] CPU: 0 PID: 31539 Comm: syz-executor.3 Not tainted 4.14.301-syzkaller #0 [ 3072.123406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3072.132761] Call Trace: [ 3072.135347] dump_stack+0x1b2/0x281 [ 3072.138977] should_fail.cold+0x10a/0x149 [ 3072.139195] FAULT_INJECTION: forcing a failure. [ 3072.139195] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.143125] __alloc_pages_nodemask+0x21e/0x2900 [ 3072.143149] ? ima_match_policy+0x85a/0x10e0 [ 3072.163454] ? __lock_acquire+0x5fc/0x3f20 [ 3072.167685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3072.172511] ? __lock_acquire+0x5fc/0x3f20 [ 3072.176734] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 3072.182607] ? trace_hardirqs_on+0x10/0x10 [ 3072.186832] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 3072.191932] ? __lock_acquire+0x5fc/0x3f20 [ 3072.196155] cache_grow_begin+0x91/0x700 [ 3072.200193] ? fs_reclaim_release+0xd0/0x110 [ 3072.204762] ? check_preemption_disabled+0x35/0x240 [ 3072.209769] cache_alloc_refill+0x273/0x350 [ 3072.214083] kmem_cache_alloc_trace+0x340/0x3d0 [ 3072.218736] __vb2_init_fileio+0x17f/0xa90 [ 3072.222955] __vb2_perform_fileio+0x993/0xda0 [ 3072.227436] ? __vb2_init_fileio+0xa90/0xa90 [ 3072.231836] ? aa_file_perm+0x304/0xab0 [ 3072.235790] vb2_fop_read+0x1ef/0x3d0 [ 3072.239574] ? vb2_fop_write+0x3d0/0x3d0 [ 3072.243611] v4l2_read+0x19a/0x200 [ 3072.247914] __vfs_read+0xe4/0x620 [ 3072.251434] ? v4l2_write+0x200/0x200 [ 3072.255221] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3072.260138] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3072.264713] ? common_file_perm+0x3ee/0x580 [ 3072.269029] ? lock_acquire+0x170/0x3f0 [ 3072.272995] ? security_file_permission+0x82/0x1e0 [ 3072.277921] ? rw_verify_area+0xe1/0x2a0 [ 3072.281976] vfs_read+0x139/0x340 [ 3072.285422] SyS_read+0xf2/0x210 [ 3072.288771] ? kernel_write+0x110/0x110 [ 3072.292729] ? __do_page_fault+0x159/0xad0 [ 3072.296944] ? do_syscall_64+0x4c/0x640 [ 3072.300899] ? kernel_write+0x110/0x110 [ 3072.304859] do_syscall_64+0x1d5/0x640 [ 3072.308740] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3072.313913] RIP: 0033:0x7f734242b0d9 [ 3072.317603] RSP: 002b:00007f734099d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3072.325297] RAX: ffffffffffffffda RBX: 00007f734254af80 RCX: 00007f734242b0d9 [ 3072.332554] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3072.339816] RBP: 00007f734099d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.347080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3072.354338] R13: 00007fffcff096ff R14: 00007f734099d300 R15: 0000000000022000 [ 3072.361604] CPU: 1 PID: 31546 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3072.369484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3072.378829] Call Trace: [ 3072.381412] dump_stack+0x1b2/0x281 [ 3072.385043] should_fail.cold+0x10a/0x149 [ 3072.389190] should_failslab+0xd6/0x130 [ 3072.393163] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3072.397833] snd_pcm_oss_change_params_locked+0x15c/0x3550 07:03:15 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 2) [ 3072.403455] ? __mutex_lock+0x360/0x1310 [ 3072.407513] ? __lock_acquire+0x5fc/0x3f20 [ 3072.411745] ? snd_pcm_plugin_append+0x190/0x190 [ 3072.416497] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3072.421947] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3072.426872] ? fsnotify+0x974/0x11b0 [ 3072.430578] ? trace_hardirqs_on+0x10/0x10 [ 3072.434811] snd_pcm_oss_make_ready+0xbb/0x170 [ 3072.439390] ? snd_pcm_oss_sync+0x740/0x740 [ 3072.443703] snd_pcm_oss_sync+0x1be/0x740 [ 3072.447850] ? snd_pcm_oss_sync+0x740/0x740 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3072.452171] snd_pcm_oss_release+0x26b/0x2f0 [ 3072.456579] ? snd_pcm_oss_sync+0x740/0x740 [ 3072.460894] __fput+0x25f/0x7a0 [ 3072.464170] task_work_run+0x11f/0x190 [ 3072.468049] exit_to_usermode_loop+0x1ad/0x200 [ 3072.472629] do_syscall_64+0x4a3/0x640 [ 3072.476517] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3072.481704] RIP: 0033:0x7fc02c0fe0d9 [ 3072.485404] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3072.493105] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 07:03:15 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 3) 07:03:15 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3072.500372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3072.507109] FAULT_INJECTION: forcing a failure. [ 3072.507109] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.507631] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.507636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3072.507641] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3072.546564] FAULT_INJECTION: forcing a failure. 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3072.546564] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.597980] CPU: 1 PID: 31570 Comm: syz-executor.3 Not tainted 4.14.301-syzkaller #0 [ 3072.605877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3072.615226] Call Trace: [ 3072.617811] dump_stack+0x1b2/0x281 [ 3072.621435] should_fail.cold+0x10a/0x149 [ 3072.625582] should_failslab+0xd6/0x130 [ 3072.629574] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3072.634241] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 3072.639600] vb2_vmalloc_alloc+0x63/0x2d0 [ 3072.643745] __vb2_queue_alloc+0x47a/0xd90 [ 3072.647987] vb2_core_reqbufs+0x347/0x910 [ 3072.652124] ? vb2_core_streamoff+0xd0/0xd0 [ 3072.656430] ? __vb2_init_fileio+0x17f/0xa90 [ 3072.660836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3072.666267] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3072.671088] __vb2_init_fileio+0x2f1/0xa90 [ 3072.675310] __vb2_perform_fileio+0x993/0xda0 [ 3072.679787] ? __vb2_init_fileio+0xa90/0xa90 [ 3072.684180] ? aa_file_perm+0x304/0xab0 [ 3072.688131] vb2_fop_read+0x1ef/0x3d0 [ 3072.691912] ? vb2_fop_write+0x3d0/0x3d0 [ 3072.695948] v4l2_read+0x19a/0x200 [ 3072.699530] __vfs_read+0xe4/0x620 [ 3072.703076] ? v4l2_write+0x200/0x200 [ 3072.706862] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3072.711775] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3072.716340] ? common_file_perm+0x3ee/0x580 [ 3072.720642] ? lock_acquire+0x170/0x3f0 [ 3072.724601] ? security_file_permission+0x82/0x1e0 [ 3072.729513] ? rw_verify_area+0xe1/0x2a0 [ 3072.733554] vfs_read+0x139/0x340 [ 3072.736989] SyS_read+0xf2/0x210 [ 3072.740334] ? kernel_write+0x110/0x110 [ 3072.744294] ? __do_page_fault+0x159/0xad0 [ 3072.748513] ? do_syscall_64+0x4c/0x640 [ 3072.752464] ? kernel_write+0x110/0x110 [ 3072.756424] do_syscall_64+0x1d5/0x640 [ 3072.760313] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3072.765497] RIP: 0033:0x7f734242b0d9 [ 3072.769190] RSP: 002b:00007f734099d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3072.776882] RAX: ffffffffffffffda RBX: 00007f734254af80 RCX: 00007f734242b0d9 [ 3072.784137] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3072.791383] RBP: 00007f734099d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.798633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3072.805880] R13: 00007fffcff096ff R14: 00007f734099d300 R15: 0000000000022000 [ 3072.813143] CPU: 0 PID: 31564 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3072.821020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3072.830371] Call Trace: [ 3072.832963] dump_stack+0x1b2/0x281 [ 3072.836595] should_fail.cold+0x10a/0x149 [ 3072.840750] should_failslab+0xd6/0x130 [ 3072.844721] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3072.849389] snd_pcm_oss_change_params_locked+0x192/0x3550 [ 3072.855014] ? __mutex_lock+0x360/0x1310 [ 3072.859067] ? __lock_acquire+0x5fc/0x3f20 [ 3072.863295] ? snd_pcm_plugin_append+0x190/0x190 [ 3072.868045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3072.873491] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3072.878414] ? fsnotify+0x974/0x11b0 [ 3072.882207] ? trace_hardirqs_on+0x10/0x10 [ 3072.887221] snd_pcm_oss_make_ready+0xbb/0x170 [ 3072.891797] ? snd_pcm_oss_sync+0x740/0x740 07:03:15 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 4) [ 3072.896107] snd_pcm_oss_sync+0x1be/0x740 [ 3072.900246] ? snd_pcm_oss_sync+0x740/0x740 [ 3072.904565] snd_pcm_oss_release+0x26b/0x2f0 [ 3072.908972] ? snd_pcm_oss_sync+0x740/0x740 [ 3072.913283] __fput+0x25f/0x7a0 [ 3072.916570] task_work_run+0x11f/0x190 [ 3072.920468] exit_to_usermode_loop+0x1ad/0x200 [ 3072.923459] FAULT_INJECTION: forcing a failure. [ 3072.923459] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.925045] do_syscall_64+0x4a3/0x640 [ 3072.925061] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3072.945273] RIP: 0033:0x7f956e3280d9 [ 3072.948965] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3072.956652] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3072.963902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3072.971149] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.978400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3072.985653] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3072.992917] CPU: 1 PID: 31589 Comm: syz-executor.3 Not tainted 4.14.301-syzkaller #0 [ 3073.000803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3073.010146] Call Trace: [ 3073.012739] dump_stack+0x1b2/0x281 [ 3073.016366] should_fail.cold+0x10a/0x149 [ 3073.020514] should_failslab+0xd6/0x130 [ 3073.024491] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3073.029596] __get_vm_area_node+0xed/0x340 [ 3073.033825] __vmalloc_node_range+0x9c/0x150 [ 3073.038229] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 3073.042546] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 07:03:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 2) 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 3) [ 3073.047902] vmalloc_user+0x47/0xa0 [ 3073.051521] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 3073.055833] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 3073.061191] vb2_vmalloc_alloc+0xa6/0x2d0 [ 3073.065331] __vb2_queue_alloc+0x47a/0xd90 [ 3073.069569] vb2_core_reqbufs+0x347/0x910 [ 3073.073726] ? vb2_core_streamoff+0xd0/0xd0 [ 3073.078044] ? __vb2_init_fileio+0x17f/0xa90 [ 3073.082447] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3073.087895] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3073.092734] __vb2_init_fileio+0x2f1/0xa90 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:15 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3073.093781] FAULT_INJECTION: forcing a failure. [ 3073.093781] name failslab, interval 1, probability 0, space 0, times 0 [ 3073.096972] __vb2_perform_fileio+0x993/0xda0 [ 3073.096988] ? __vb2_init_fileio+0xa90/0xa90 [ 3073.096999] ? aa_file_perm+0x304/0xab0 [ 3073.097009] vb2_fop_read+0x1ef/0x3d0 [ 3073.097024] ? vb2_fop_write+0x3d0/0x3d0 [ 3073.128837] v4l2_read+0x19a/0x200 [ 3073.132378] __vfs_read+0xe4/0x620 [ 3073.135910] ? v4l2_write+0x200/0x200 [ 3073.139703] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3073.144633] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3073.149210] ? common_file_perm+0x3ee/0x580 [ 3073.153526] ? lock_acquire+0x170/0x3f0 [ 3073.157500] ? security_file_permission+0x82/0x1e0 [ 3073.162424] ? rw_verify_area+0xe1/0x2a0 [ 3073.166482] vfs_read+0x139/0x340 [ 3073.169933] SyS_read+0xf2/0x210 [ 3073.173278] ? kernel_write+0x110/0x110 [ 3073.177233] ? __do_page_fault+0x159/0xad0 [ 3073.181448] ? do_syscall_64+0x4c/0x640 [ 3073.185401] ? kernel_write+0x110/0x110 [ 3073.189355] do_syscall_64+0x1d5/0x640 [ 3073.193229] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3073.198394] RIP: 0033:0x7f734242b0d9 [ 3073.202080] RSP: 002b:00007f734099d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3073.209767] RAX: ffffffffffffffda RBX: 00007f734254af80 RCX: 00007f734242b0d9 [ 3073.217018] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3073.224264] RBP: 00007f734099d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.231508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3073.238754] R13: 00007fffcff096ff R14: 00007f734099d300 R15: 0000000000022000 [ 3073.246013] CPU: 0 PID: 31600 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3073.253889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3073.263233] Call Trace: [ 3073.265815] dump_stack+0x1b2/0x281 [ 3073.269438] should_fail.cold+0x10a/0x149 [ 3073.271224] FAULT_INJECTION: forcing a failure. [ 3073.271224] name failslab, interval 1, probability 0, space 0, times 0 [ 3073.273578] should_failslab+0xd6/0x130 [ 3073.273590] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3073.273608] snd_pcm_oss_change_params_locked+0x192/0x3550 [ 3073.298984] ? __mutex_lock+0x360/0x1310 [ 3073.303032] ? __lock_acquire+0x5fc/0x3f20 [ 3073.307253] ? snd_pcm_plugin_append+0x190/0x190 [ 3073.312001] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3073.317457] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3073.322376] ? fsnotify+0x974/0x11b0 [ 3073.326072] ? trace_hardirqs_on+0x10/0x10 [ 3073.330293] snd_pcm_oss_make_ready+0xbb/0x170 [ 3073.334853] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.339155] snd_pcm_oss_sync+0x1be/0x740 [ 3073.343291] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.347596] snd_pcm_oss_release+0x26b/0x2f0 [ 3073.351987] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.356287] __fput+0x25f/0x7a0 [ 3073.359552] task_work_run+0x11f/0x190 [ 3073.363422] exit_to_usermode_loop+0x1ad/0x200 [ 3073.367988] do_syscall_64+0x4a3/0x640 [ 3073.373896] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3073.379161] RIP: 0033:0x7fc02c0fe0d9 [ 3073.382851] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3073.390539] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 07:03:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3073.397793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3073.405046] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.412293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3073.419542] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3073.426802] CPU: 1 PID: 31613 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3073.434763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3073.444107] Call Trace: [ 3073.446692] dump_stack+0x1b2/0x281 07:03:16 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:16 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3073.450323] should_fail.cold+0x10a/0x149 [ 3073.454472] should_failslab+0xd6/0x130 [ 3073.458441] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3073.463112] snd_pcm_oss_change_params_locked+0x1c8/0x3550 [ 3073.468738] ? __mutex_lock+0x360/0x1310 [ 3073.472811] ? __lock_acquire+0x5fc/0x3f20 [ 3073.477045] ? snd_pcm_plugin_append+0x190/0x190 [ 3073.481796] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3073.487243] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3073.492171] ? fsnotify+0x974/0x11b0 [ 3073.495880] ? trace_hardirqs_on+0x10/0x10 07:03:16 executing program 0: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3073.500118] snd_pcm_oss_make_ready+0xbb/0x170 [ 3073.504699] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.509014] snd_pcm_oss_sync+0x1be/0x740 [ 3073.513161] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.517475] snd_pcm_oss_release+0x26b/0x2f0 [ 3073.521878] ? snd_pcm_oss_sync+0x740/0x740 [ 3073.526192] __fput+0x25f/0x7a0 [ 3073.529494] task_work_run+0x11f/0x190 [ 3073.533393] exit_to_usermode_loop+0x1ad/0x200 [ 3073.537979] do_syscall_64+0x4a3/0x640 [ 3073.541869] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3073.547047] RIP: 0033:0x7f956e3280d9 [ 3073.550747] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3073.558446] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3073.565795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3073.573054] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.580317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3073.587578] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3073.593322] syz-executor.3: vmalloc: allocation failure: 462848 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 3073.617026] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 3073.623636] CPU: 0 PID: 31589 Comm: syz-executor.3 Not tainted 4.14.301-syzkaller #0 [ 3073.631522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3073.641302] Call Trace: [ 3073.643869] dump_stack+0x1b2/0x281 [ 3073.647474] warn_alloc.cold+0x96/0x1cc [ 3073.651429] ? zone_watermark_ok_safe+0x220/0x220 [ 3073.656257] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3073.661697] ? __get_vm_area_node+0xed/0x340 [ 3073.666094] ? __get_vm_area_node+0x27d/0x340 [ 3073.670570] __vmalloc_node_range+0x10e/0x150 [ 3073.675040] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 3073.680382] vmalloc_user+0x47/0xa0 [ 3073.683981] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 3073.688283] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 3073.693618] vb2_vmalloc_alloc+0xa6/0x2d0 [ 3073.697740] __vb2_queue_alloc+0x47a/0xd90 [ 3073.701953] vb2_core_reqbufs+0x347/0x910 [ 3073.706078] ? vb2_core_streamoff+0xd0/0xd0 [ 3073.710373] ? __vb2_init_fileio+0x17f/0xa90 [ 3073.714767] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 3073.720202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 3073.725419] __vb2_init_fileio+0x2f1/0xa90 [ 3073.729639] __vb2_perform_fileio+0x993/0xda0 [ 3073.734894] ? __vb2_init_fileio+0xa90/0xa90 [ 3073.739285] ? aa_file_perm+0x304/0xab0 [ 3073.743235] vb2_fop_read+0x1ef/0x3d0 [ 3073.747016] ? vb2_fop_write+0x3d0/0x3d0 [ 3073.751051] v4l2_read+0x19a/0x200 [ 3073.754567] __vfs_read+0xe4/0x620 [ 3073.758090] ? v4l2_write+0x200/0x200 [ 3073.761865] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3073.766773] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3073.771330] ? common_file_perm+0x3ee/0x580 [ 3073.775625] ? lock_acquire+0x170/0x3f0 [ 3073.779583] ? security_file_permission+0x82/0x1e0 [ 3073.784517] ? rw_verify_area+0xe1/0x2a0 [ 3073.788572] vfs_read+0x139/0x340 [ 3073.792006] SyS_read+0xf2/0x210 [ 3073.795361] ? kernel_write+0x110/0x110 [ 3073.799313] ? __do_page_fault+0x159/0xad0 [ 3073.803530] ? do_syscall_64+0x4c/0x640 [ 3073.807487] ? kernel_write+0x110/0x110 [ 3073.811435] do_syscall_64+0x1d5/0x640 [ 3073.815308] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3073.820493] RIP: 0033:0x7f734242b0d9 [ 3073.824185] RSP: 002b:00007f734099d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3073.831866] RAX: ffffffffffffffda RBX: 00007f734254af80 RCX: 00007f734242b0d9 [ 3073.839109] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3073.846358] RBP: 00007f734099d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.853601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3073.860842] R13: 00007fffcff096ff R14: 00007f734099d300 R15: 0000000000022000 [ 3073.875677] Mem-Info: [ 3073.878839] active_anon:25986 inactive_anon:9208 isolated_anon:0 [ 3073.878839] active_file:6153 inactive_file:14191 isolated_file:0 [ 3073.878839] unevictable:0 dirty:61 writeback:0 unstable:0 [ 3073.878839] slab_reclaimable:28963 slab_unreclaimable:120353 [ 3073.878839] mapped:35955 shmem:10665 pagetables:615 bounce:0 [ 3073.878839] free:1462890 free_pcp:342 free_cma:0 [ 3073.918304] Node 0 active_anon:103848kB inactive_anon:36832kB active_file:24492kB inactive_file:56784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143860kB dirty:260kB writeback:0kB shmem:42660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3073.947032] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3073.973561] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3073.999921] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 3074.004947] Node 0 DMA32 free:1797056kB min:36196kB low:45244kB high:54292kB active_anon:103848kB inactive_anon:36832kB active_file:24492kB inactive_file:56796kB unevictable:0kB writepending:272kB present:3129332kB managed:2787988kB mlocked:0kB kernel_stack:7328kB pagetables:2416kB bounce:0kB free_pcp:1444kB local_pcp:712kB free_cma:0kB [ 3074.034991] lowmem_reserve[]: 0 0 0 0 0 [ 3074.039030] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3074.064699] lowmem_reserve[]: 0 0 0 0 0 [ 3074.068801] Node 1 Normal free:4040340kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3074.096449] lowmem_reserve[]: 0 0 0 0 0 [ 3074.100478] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 3074.115713] Node 0 DMA32: 2598*4kB (UME) 1120*8kB (UME) 938*16kB (UME) 969*32kB (UME) 917*64kB (UME) 240*128kB (UME) 62*256kB (UM) 42*512kB (UM) 29*1024kB (UM) 27*2048kB (UME) 371*4096kB (UM) = 1796760kB [ 3074.134052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3074.146797] Node 1 Normal: 73*4kB (UME) 410*8kB (UME) 294*16kB (UME) 82*32kB (UME) 28*64kB (UME) 18*128kB (UM) 6*256kB (UM) 5*512kB (UE) 3*1024kB (UME) 4*2048kB (UM) 979*4096kB (M) = 4040340kB [ 3074.164155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3074.173033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3074.181632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3074.190595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3074.199183] 31019 total pagecache pages 07:03:16 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) 07:03:16 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 3) 07:03:16 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 4) 07:03:16 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.203140] 0 pages in swap cache [ 3074.206564] Swap cache stats: add 0, delete 0, find 0/0 [ 3074.211956] Free swap = 0kB [ 3074.214950] Total swap = 0kB [ 3074.218041] 2097051 pages RAM [ 3074.221129] 0 pages HighMem/MovableOnly [ 3074.225088] 363896 pages reserved [ 3074.228580] 0 pages cma reserved 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.255420] FAULT_INJECTION: forcing a failure. [ 3074.255420] name failslab, interval 1, probability 0, space 0, times 0 [ 3074.256305] FAULT_INJECTION: forcing a failure. [ 3074.256305] name failslab, interval 1, probability 0, space 0, times 0 [ 3074.276047] CPU: 0 PID: 31643 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3074.285744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3074.295099] Call Trace: [ 3074.297685] dump_stack+0x1b2/0x281 [ 3074.301311] should_fail.cold+0x10a/0x149 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.305463] should_failslab+0xd6/0x130 [ 3074.309452] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3074.314113] snd_pcm_oss_change_params_locked+0x678/0x3550 [ 3074.319725] ? __mutex_lock+0x360/0x1310 [ 3074.324557] ? __lock_acquire+0x5fc/0x3f20 [ 3074.328781] ? snd_pcm_plugin_append+0x190/0x190 [ 3074.333533] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3074.338975] ? fsnotify+0x974/0x11b0 [ 3074.342688] snd_pcm_oss_make_ready+0xbb/0x170 [ 3074.347264] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.351576] snd_pcm_oss_sync+0x1be/0x740 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.355711] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.360027] snd_pcm_oss_release+0x26b/0x2f0 [ 3074.364430] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.368746] __fput+0x25f/0x7a0 [ 3074.372016] task_work_run+0x11f/0x190 [ 3074.375896] exit_to_usermode_loop+0x1ad/0x200 [ 3074.380466] do_syscall_64+0x4a3/0x640 [ 3074.384349] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3074.389526] RIP: 0033:0x7f956e3280d9 [ 3074.393225] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.400923] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3074.408178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3074.415437] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.422698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3074.429954] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3074.437849] CPU: 1 PID: 31645 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3074.446249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3074.455594] Call Trace: [ 3074.458177] dump_stack+0x1b2/0x281 [ 3074.461803] should_fail.cold+0x10a/0x149 [ 3074.465946] should_failslab+0xd6/0x130 [ 3074.470182] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3074.474850] snd_pcm_oss_change_params_locked+0x1c8/0x3550 [ 3074.480472] ? __mutex_lock+0x360/0x1310 [ 3074.484540] ? __lock_acquire+0x5fc/0x3f20 [ 3074.488776] ? snd_pcm_plugin_append+0x190/0x190 [ 3074.493536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3074.498990] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3074.503918] ? fsnotify+0x974/0x11b0 [ 3074.507627] ? trace_hardirqs_on+0x10/0x10 [ 3074.511866] snd_pcm_oss_make_ready+0xbb/0x170 [ 3074.516452] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.520772] snd_pcm_oss_sync+0x1be/0x740 [ 3074.524919] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.529234] snd_pcm_oss_release+0x26b/0x2f0 [ 3074.533642] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.537959] __fput+0x25f/0x7a0 [ 3074.541235] task_work_run+0x11f/0x190 [ 3074.545123] exit_to_usermode_loop+0x1ad/0x200 [ 3074.549704] do_syscall_64+0x4a3/0x640 07:03:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) 07:03:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 4) 07:03:17 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 5) 07:03:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) 07:03:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.553594] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3074.558775] RIP: 0033:0x7fc02c0fe0d9 [ 3074.562476] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3074.570178] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3074.577457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3074.584724] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.591982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3074.599228] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x3c) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) [ 3074.643348] FAULT_INJECTION: forcing a failure. [ 3074.643348] name failslab, interval 1, probability 0, space 0, times 0 [ 3074.671917] FAULT_INJECTION: forcing a failure. [ 3074.671917] name failslab, interval 1, probability 0, space 0, times 0 07:03:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3074.701236] CPU: 1 PID: 31690 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3074.709132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3074.718478] Call Trace: [ 3074.721066] dump_stack+0x1b2/0x281 [ 3074.724692] should_fail.cold+0x10a/0x149 [ 3074.728835] should_failslab+0xd6/0x130 [ 3074.732802] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3074.737469] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3074.743002] ? mark_held_locks+0xa6/0xf0 [ 3074.747064] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3074.752514] ? snd_pcm_oss_change_params_locked+0x2223/0x3550 [ 3074.758405] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3074.763415] snd_pcm_oss_change_params_locked+0x8ff/0x3550 [ 3074.769019] ? snd_pcm_plugin_append+0x190/0x190 [ 3074.773762] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3074.779193] ? fsnotify+0x974/0x11b0 [ 3074.782885] snd_pcm_oss_make_ready+0xbb/0x170 [ 3074.787439] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.791732] snd_pcm_oss_sync+0x1be/0x740 [ 3074.795858] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.800150] snd_pcm_oss_release+0x26b/0x2f0 [ 3074.804531] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.808830] __fput+0x25f/0x7a0 [ 3074.812090] task_work_run+0x11f/0x190 [ 3074.815957] exit_to_usermode_loop+0x1ad/0x200 [ 3074.820520] do_syscall_64+0x4a3/0x640 [ 3074.824382] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3074.829647] RIP: 0033:0x7f956e3280d9 [ 3074.833333] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3074.841020] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 07:03:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x3c) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x3c) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) (async) [ 3074.848262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3074.855503] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.862746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3074.869988] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3074.877671] CPU: 1 PID: 31695 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3074.885564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3074.895084] Call Trace: [ 3074.897669] dump_stack+0x1b2/0x281 [ 3074.901291] should_fail.cold+0x10a/0x149 [ 3074.905436] should_failslab+0xd6/0x130 [ 3074.909410] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3074.914076] snd_pcm_oss_change_params_locked+0x678/0x3550 [ 3074.919697] ? __mutex_lock+0x360/0x1310 [ 3074.923756] ? __lock_acquire+0x5fc/0x3f20 [ 3074.927989] ? snd_pcm_plugin_append+0x190/0x190 [ 3074.932739] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3074.938190] ? fsnotify+0x974/0x11b0 [ 3074.941888] snd_pcm_oss_make_ready+0xbb/0x170 [ 3074.946450] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.950749] snd_pcm_oss_sync+0x1be/0x740 [ 3074.954869] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.959943] snd_pcm_oss_release+0x26b/0x2f0 [ 3074.964323] ? snd_pcm_oss_sync+0x740/0x740 [ 3074.968615] __fput+0x25f/0x7a0 [ 3074.971870] task_work_run+0x11f/0x190 [ 3074.975734] exit_to_usermode_loop+0x1ad/0x200 [ 3074.980293] do_syscall_64+0x4a3/0x640 [ 3074.984156] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3074.989316] RIP: 0033:0x7fc02c0fe0d9 [ 3074.993093] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 07:03:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 6) [ 3075.000771] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3075.008025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3075.015270] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.022518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.029763] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 07:03:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 5) 07:03:17 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x3c) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x3c) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r2) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) (async) 07:03:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.074348] FAULT_INJECTION: forcing a failure. [ 3075.074348] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.111125] FAULT_INJECTION: forcing a failure. [ 3075.111125] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.111259] CPU: 1 PID: 31734 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3075.130202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3075.139550] Call Trace: [ 3075.142134] dump_stack+0x1b2/0x281 [ 3075.145759] should_fail.cold+0x10a/0x149 [ 3075.149904] should_failslab+0xd6/0x130 [ 3075.153871] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3075.158528] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3075.164060] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3075.169502] ? memset+0x20/0x40 [ 3075.172769] ? snd_interval_refine+0x24a/0x460 [ 3075.177345] ? plug_slave_size+0x1c8/0x380 [ 3075.181579] snd_pcm_oss_change_params_locked+0x167c/0x3550 [ 3075.187284] ? snd_pcm_plugin_append+0x190/0x190 [ 3075.192023] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3075.198241] ? fsnotify+0x974/0x11b0 [ 3075.201944] snd_pcm_oss_make_ready+0xbb/0x170 [ 3075.206511] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.210809] snd_pcm_oss_sync+0x1be/0x740 [ 3075.214943] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.219250] snd_pcm_oss_release+0x26b/0x2f0 [ 3075.223648] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.227950] __fput+0x25f/0x7a0 [ 3075.231227] task_work_run+0x11f/0x190 [ 3075.235098] exit_to_usermode_loop+0x1ad/0x200 [ 3075.239668] do_syscall_64+0x4a3/0x640 [ 3075.243538] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3075.248706] RIP: 0033:0x7f956e3280d9 [ 3075.252408] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3075.260093] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3075.267340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3075.274590] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.281835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.289084] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3075.296342] CPU: 0 PID: 31742 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3075.304219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3075.313563] Call Trace: [ 3075.316148] dump_stack+0x1b2/0x281 [ 3075.319772] should_fail.cold+0x10a/0x149 07:03:18 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.323918] should_failslab+0xd6/0x130 [ 3075.327890] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3075.332557] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3075.338094] ? mark_held_locks+0xa6/0xf0 [ 3075.342150] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3075.347599] ? snd_pcm_oss_change_params_locked+0x2223/0x3550 [ 3075.353479] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3075.358495] snd_pcm_oss_change_params_locked+0x8ff/0x3550 [ 3075.364125] ? snd_pcm_plugin_append+0x190/0x190 [ 3075.368879] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.374334] ? fsnotify+0x974/0x11b0 [ 3075.378052] snd_pcm_oss_make_ready+0xbb/0x170 [ 3075.382622] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.386928] snd_pcm_oss_sync+0x1be/0x740 [ 3075.391077] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.395392] snd_pcm_oss_release+0x26b/0x2f0 [ 3075.399792] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.404105] __fput+0x25f/0x7a0 [ 3075.407383] task_work_run+0x11f/0x190 [ 3075.411276] exit_to_usermode_loop+0x1ad/0x200 [ 3075.415846] do_syscall_64+0x4a3/0x640 [ 3075.419733] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 07:03:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 7) [ 3075.424909] RIP: 0033:0x7fc02c0fe0d9 [ 3075.428602] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3075.436286] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3075.443531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3075.450774] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.458021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.465276] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 07:03:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 6) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000001980)=""/4112, 0x1010) 07:03:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.499982] FAULT_INJECTION: forcing a failure. [ 3075.499982] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.524089] FAULT_INJECTION: forcing a failure. [ 3075.524089] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.540553] CPU: 0 PID: 31780 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3075.548443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3075.557976] Call Trace: [ 3075.560562] dump_stack+0x1b2/0x281 [ 3075.564361] should_fail.cold+0x10a/0x149 [ 3075.568517] should_failslab+0xd6/0x130 [ 3075.572493] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3075.577164] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3075.582700] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3075.588143] ? memset+0x20/0x40 [ 3075.591418] ? snd_interval_refine+0x24a/0x460 [ 3075.596002] ? plug_slave_size+0x1c8/0x380 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.600242] snd_pcm_oss_change_params_locked+0x16cf/0x3550 [ 3075.605955] ? snd_pcm_plugin_append+0x190/0x190 [ 3075.610705] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3075.617196] ? fsnotify+0x974/0x11b0 [ 3075.621110] snd_pcm_oss_make_ready+0xbb/0x170 [ 3075.625692] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.630009] snd_pcm_oss_sync+0x1be/0x740 [ 3075.634155] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.638477] snd_pcm_oss_release+0x26b/0x2f0 [ 3075.642879] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.647183] __fput+0x25f/0x7a0 [ 3075.650449] task_work_run+0x11f/0x190 [ 3075.654319] exit_to_usermode_loop+0x1ad/0x200 [ 3075.659235] do_syscall_64+0x4a3/0x640 [ 3075.663106] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3075.668282] RIP: 0033:0x7f956e3280d9 [ 3075.671978] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3075.679677] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3075.686927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3075.694178] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.701424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.708681] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3075.715959] CPU: 1 PID: 31787 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3075.723844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3075.733194] Call Trace: [ 3075.735780] dump_stack+0x1b2/0x281 [ 3075.739405] should_fail.cold+0x10a/0x149 [ 3075.743552] should_failslab+0xd6/0x130 [ 3075.747523] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3075.752193] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3075.757730] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3075.763173] ? memset+0x20/0x40 [ 3075.766450] ? snd_interval_refine+0x24a/0x460 [ 3075.771033] ? plug_slave_size+0x1c8/0x380 [ 3075.775273] snd_pcm_oss_change_params_locked+0x167c/0x3550 [ 3075.780994] ? snd_pcm_plugin_append+0x190/0x190 [ 3075.785748] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3075.791198] ? fsnotify+0x974/0x11b0 [ 3075.794913] snd_pcm_oss_make_ready+0xbb/0x170 [ 3075.799493] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.803805] snd_pcm_oss_sync+0x1be/0x740 [ 3075.807951] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.812269] snd_pcm_oss_release+0x26b/0x2f0 [ 3075.816673] ? snd_pcm_oss_sync+0x740/0x740 [ 3075.816769] FAULT_INJECTION: forcing a failure. [ 3075.816769] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.820982] __fput+0x25f/0x7a0 [ 3075.820999] task_work_run+0x11f/0x190 [ 3075.821013] exit_to_usermode_loop+0x1ad/0x200 [ 3075.821023] do_syscall_64+0x4a3/0x640 [ 3075.821036] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3075.821043] RIP: 0033:0x7fc02c0fe0d9 [ 3075.821055] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3075.864436] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3075.871701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3075.878960] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.886209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.893469] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 07:03:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 8) 07:03:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000001980)=""/4112, 0x1010) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000001980)=""/4112, 0x1010) (async) 07:03:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.900732] CPU: 0 PID: 31814 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3075.908610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3075.917952] Call Trace: [ 3075.920533] dump_stack+0x1b2/0x281 [ 3075.924160] should_fail.cold+0x10a/0x149 [ 3075.928307] should_failslab+0xd6/0x130 [ 3075.932276] kmem_cache_alloc+0x40/0x3c0 [ 3075.936332] __debug_object_init+0x578/0x7a0 [ 3075.940738] ? snd_pcm_stream_unlock_irqrestore.part.0+0xd0/0xd0 [ 3075.946877] ? debug_object_destroy+0x240/0x240 07:03:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 7) 07:03:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.951541] __init_work+0x3f/0x50 [ 3075.955071] pm_qos_add_request+0x6c/0x4f0 [ 3075.959300] snd_pcm_hw_params+0x195b/0x1ee0 [ 3075.963710] ? snd_pcm_sync_ptr+0x850/0x850 [ 3075.968027] ? snd_pcm_hw_param_near.constprop.0+0x552/0x6f0 [ 3075.973473] FAULT_INJECTION: forcing a failure. [ 3075.973473] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.973818] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3075.973826] ? memset+0x20/0x40 [ 3075.973843] snd_pcm_kernel_ioctl+0x19d/0x330 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3075.998172] snd_pcm_oss_change_params_locked+0x16fe/0x3550 [ 3076.004149] ? snd_pcm_plugin_append+0x190/0x190 [ 3076.008899] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.014351] ? fsnotify+0x974/0x11b0 [ 3076.018063] snd_pcm_oss_make_ready+0xbb/0x170 [ 3076.022644] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.026955] snd_pcm_oss_sync+0x1be/0x740 [ 3076.031084] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.035388] snd_pcm_oss_release+0x26b/0x2f0 [ 3076.039784] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.044094] __fput+0x25f/0x7a0 [ 3076.047371] task_work_run+0x11f/0x190 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) [ 3076.051259] exit_to_usermode_loop+0x1ad/0x200 [ 3076.055830] do_syscall_64+0x4a3/0x640 [ 3076.059705] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3076.064876] RIP: 0033:0x7f956e3280d9 [ 3076.068572] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3076.076266] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3076.083517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3076.090770] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 07:03:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) [ 3076.098027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3076.105284] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3076.137246] CPU: 1 PID: 31830 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3076.145146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3076.154491] Call Trace: [ 3076.157086] dump_stack+0x1b2/0x281 [ 3076.160713] should_fail.cold+0x10a/0x149 [ 3076.164866] should_failslab+0xd6/0x130 [ 3076.168841] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3076.173509] snd_pcm_hw_param_near.constprop.0+0xc3/0x6f0 [ 3076.179042] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3076.183945] FAULT_INJECTION: forcing a failure. [ 3076.183945] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.184493] ? memset+0x20/0x40 [ 3076.198919] ? snd_interval_refine+0x24a/0x460 [ 3076.203492] ? plug_slave_size+0x1c8/0x380 [ 3076.207711] snd_pcm_oss_change_params_locked+0x16cf/0x3550 [ 3076.213407] ? snd_pcm_plugin_append+0x190/0x190 [ 3076.218144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.223576] ? fsnotify+0x974/0x11b0 [ 3076.227276] snd_pcm_oss_make_ready+0xbb/0x170 [ 3076.231839] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.236138] snd_pcm_oss_sync+0x1be/0x740 [ 3076.240266] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.244564] snd_pcm_oss_release+0x26b/0x2f0 [ 3076.248954] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.253254] __fput+0x25f/0x7a0 [ 3076.256516] task_work_run+0x11f/0x190 [ 3076.260392] exit_to_usermode_loop+0x1ad/0x200 [ 3076.264956] do_syscall_64+0x4a3/0x640 [ 3076.268832] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3076.274000] RIP: 0033:0x7fc02c0fe0d9 [ 3076.277692] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3076.285393] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3076.292640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:03:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 9) [ 3076.299886] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.307138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3076.314387] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3076.321651] CPU: 0 PID: 31848 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3076.329528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3076.338872] Call Trace: [ 3076.341455] dump_stack+0x1b2/0x281 [ 3076.345079] should_fail.cold+0x10a/0x149 [ 3076.349223] should_failslab+0xd6/0x130 [ 3076.353191] __kmalloc+0x2c1/0x400 [ 3076.356729] ? snd_pcm_plugin_build+0x40d/0x6e0 [ 3076.361398] snd_pcm_plugin_build+0x40d/0x6e0 [ 3076.365888] snd_pcm_plugin_build_mulaw+0x229/0x720 [ 3076.370897] ? mulaw_decode+0x6c0/0x6c0 [ 3076.374865] ? mulaw_encode+0x6d0/0x6d0 [ 3076.378831] ? snd_pcm_hw_params+0x70d/0x1ee0 [ 3076.383315] snd_pcm_plug_format_plugins+0xb5c/0x1160 [ 3076.388489] ? snd_pcm_plug_slave_format+0x470/0x470 [ 3076.393573] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3076.398997] ? memset+0x20/0x40 [ 3076.402252] snd_pcm_oss_change_params_locked+0x2d0a/0x3550 [ 3076.407952] ? snd_pcm_plugin_append+0x190/0x190 [ 3076.412693] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.418119] ? fsnotify+0x974/0x11b0 [ 3076.421805] snd_pcm_oss_make_ready+0xbb/0x170 [ 3076.426356] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.430656] snd_pcm_oss_sync+0x1be/0x740 [ 3076.434793] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.439095] snd_pcm_oss_release+0x26b/0x2f0 [ 3076.443480] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.447778] __fput+0x25f/0x7a0 [ 3076.451042] task_work_run+0x11f/0x190 [ 3076.454901] exit_to_usermode_loop+0x1ad/0x200 [ 3076.459459] do_syscall_64+0x4a3/0x640 [ 3076.463319] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3076.468486] RIP: 0033:0x7f956e3280d9 [ 3076.472176] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3076.479854] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3076.487102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3076.494353] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 07:03:19 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async, rerun: 64) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async, rerun: 64) read$usbfs(r0, &(0x7f0000001980)=""/4112, 0x1010) 07:03:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 8) 07:03:19 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 10) 07:03:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3076.501603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3076.508852] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 07:03:19 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3076.576649] FAULT_INJECTION: forcing a failure. [ 3076.576649] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.593171] FAULT_INJECTION: forcing a failure. [ 3076.593171] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.623493] CPU: 0 PID: 31864 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3076.631389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3076.640749] Call Trace: [ 3076.643335] dump_stack+0x1b2/0x281 [ 3076.646965] should_fail.cold+0x10a/0x149 [ 3076.651115] should_failslab+0xd6/0x130 [ 3076.655101] __kmalloc+0x2c1/0x400 [ 3076.658637] ? snd_pcm_plugin_build+0x60/0x6e0 [ 3076.663305] snd_pcm_plugin_build+0x60/0x6e0 [ 3076.667717] ? snd_pcm_plug_format_plugins+0x487/0x1160 [ 3076.673076] snd_pcm_plugin_build_io+0x1c4/0x540 [ 3076.677829] ? io_playback_transfer+0x2d0/0x2d0 [ 3076.682492] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3076.687930] ? memset+0x20/0x40 [ 3076.691207] snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3076.696924] ? snd_pcm_plugin_append+0x190/0x190 [ 3076.701676] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.707126] ? fsnotify+0x974/0x11b0 [ 3076.710841] snd_pcm_oss_make_ready+0xbb/0x170 [ 3076.715412] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.719717] snd_pcm_oss_sync+0x1be/0x740 [ 3076.723850] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.728172] snd_pcm_oss_release+0x26b/0x2f0 [ 3076.732577] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.736883] __fput+0x25f/0x7a0 [ 3076.740161] task_work_run+0x11f/0x190 [ 3076.744038] exit_to_usermode_loop+0x1ad/0x200 [ 3076.748607] do_syscall_64+0x4a3/0x640 [ 3076.752486] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3076.757657] RIP: 0033:0x7f956e3280d9 [ 3076.761347] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3076.769034] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3076.776282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3076.783527] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.790775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3076.798036] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3076.805305] CPU: 1 PID: 31870 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3076.813187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3076.822541] Call Trace: 07:03:19 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3076.825127] dump_stack+0x1b2/0x281 [ 3076.828748] should_fail.cold+0x10a/0x149 [ 3076.832902] should_failslab+0xd6/0x130 [ 3076.836872] __kmalloc+0x2c1/0x400 [ 3076.840406] ? snd_pcm_plugin_build+0x60/0x6e0 [ 3076.844987] snd_pcm_plugin_build+0x60/0x6e0 [ 3076.849397] snd_pcm_plugin_build_mulaw+0x229/0x720 [ 3076.854413] ? mulaw_decode+0x6c0/0x6c0 [ 3076.858388] ? mulaw_encode+0x6d0/0x6d0 [ 3076.862358] ? snd_pcm_hw_params+0x70d/0x1ee0 [ 3076.866857] snd_pcm_plug_format_plugins+0xb5c/0x1160 [ 3076.872043] ? snd_pcm_plug_slave_format+0x470/0x470 [ 3076.877141] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3076.882580] ? memset+0x20/0x40 [ 3076.885857] snd_pcm_oss_change_params_locked+0x2d0a/0x3550 [ 3076.891575] ? snd_pcm_plugin_append+0x190/0x190 [ 3076.896328] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3076.901780] ? fsnotify+0x974/0x11b0 [ 3076.905493] snd_pcm_oss_make_ready+0xbb/0x170 [ 3076.910073] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.914380] snd_pcm_oss_sync+0x1be/0x740 [ 3076.918511] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.922812] snd_pcm_oss_release+0x26b/0x2f0 [ 3076.927208] ? snd_pcm_oss_sync+0x740/0x740 [ 3076.931519] __fput+0x25f/0x7a0 [ 3076.934784] task_work_run+0x11f/0x190 [ 3076.938655] exit_to_usermode_loop+0x1ad/0x200 [ 3076.943211] do_syscall_64+0x4a3/0x640 [ 3076.947074] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3076.952233] RIP: 0033:0x7fc02c0fe0d9 [ 3076.955914] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3076.963601] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3076.970858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3076.978105] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.985356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3076.992608] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 07:03:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 9) 07:03:19 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:19 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (async) 07:03:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 11) 07:03:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) 07:03:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3077.022783] FAULT_INJECTION: forcing a failure. [ 3077.022783] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.043459] CPU: 1 PID: 31903 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3077.051355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3077.060704] Call Trace: [ 3077.063287] dump_stack+0x1b2/0x281 [ 3077.066916] should_fail.cold+0x10a/0x149 [ 3077.069464] FAULT_INJECTION: forcing a failure. [ 3077.069464] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.071057] should_failslab+0xd6/0x130 [ 3077.071069] __kmalloc+0x2c1/0x400 [ 3077.071080] ? snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.071091] snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.071106] snd_pcm_plugin_build_mulaw+0x229/0x720 [ 3077.103867] ? mulaw_decode+0x6c0/0x6c0 [ 3077.107844] ? mulaw_encode+0x6d0/0x6d0 [ 3077.111812] ? snd_pcm_hw_params+0x70d/0x1ee0 [ 3077.116302] snd_pcm_plug_format_plugins+0xb5c/0x1160 [ 3077.121488] ? snd_pcm_plug_slave_format+0x470/0x470 [ 3077.126584] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3077.132033] ? memset+0x20/0x40 [ 3077.135307] snd_pcm_oss_change_params_locked+0x2d0a/0x3550 [ 3077.141021] ? snd_pcm_plugin_append+0x190/0x190 [ 3077.145777] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.151220] ? fsnotify+0x974/0x11b0 [ 3077.154925] snd_pcm_oss_make_ready+0xbb/0x170 [ 3077.159489] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.163791] snd_pcm_oss_sync+0x1be/0x740 [ 3077.167928] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.172233] snd_pcm_oss_release+0x26b/0x2f0 [ 3077.176623] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.180932] __fput+0x25f/0x7a0 [ 3077.184197] task_work_run+0x11f/0x190 [ 3077.188070] exit_to_usermode_loop+0x1ad/0x200 [ 3077.192631] do_syscall_64+0x4a3/0x640 [ 3077.196508] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3077.201774] RIP: 0033:0x7fc02c0fe0d9 [ 3077.205463] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3077.213149] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3077.220395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3077.227645] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.235070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.242322] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3077.249580] CPU: 0 PID: 31913 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3077.257459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3077.266802] Call Trace: [ 3077.269386] dump_stack+0x1b2/0x281 [ 3077.273011] should_fail.cold+0x10a/0x149 [ 3077.275422] FAULT_INJECTION: forcing a failure. [ 3077.275422] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.277160] should_failslab+0xd6/0x130 [ 3077.277178] __kmalloc+0x2c1/0x400 [ 3077.295813] ? snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.300465] snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.304941] ? snd_pcm_plug_format_plugins+0x487/0x1160 [ 3077.310286] snd_pcm_plugin_build_io+0x1c4/0x540 [ 3077.315020] ? io_playback_transfer+0x2d0/0x2d0 07:03:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 10) [ 3077.319678] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3077.325115] ? memset+0x20/0x40 [ 3077.328409] snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3077.334125] ? snd_pcm_plugin_append+0x190/0x190 [ 3077.338872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.344314] ? fsnotify+0x974/0x11b0 [ 3077.348018] snd_pcm_oss_make_ready+0xbb/0x170 [ 3077.352583] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.356882] snd_pcm_oss_sync+0x1be/0x740 [ 3077.361009] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.365917] snd_pcm_oss_release+0x26b/0x2f0 [ 3077.370307] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.374604] __fput+0x25f/0x7a0 [ 3077.377865] task_work_run+0x11f/0x190 [ 3077.381746] exit_to_usermode_loop+0x1ad/0x200 [ 3077.386312] do_syscall_64+0x4a3/0x640 [ 3077.390182] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3077.395349] RIP: 0033:0x7f956e3280d9 [ 3077.399042] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3077.406729] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3077.413974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3077.421221] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.428470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3077.435717] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3077.442978] CPU: 1 PID: 31927 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3077.450855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3077.460203] Call Trace: [ 3077.462783] dump_stack+0x1b2/0x281 [ 3077.466408] should_fail.cold+0x10a/0x149 [ 3077.470560] should_failslab+0xd6/0x130 [ 3077.474542] __kmalloc+0x2c1/0x400 [ 3077.478079] ? snd_pcm_plugin_build+0x60/0x6e0 [ 3077.482656] snd_pcm_plugin_build+0x60/0x6e0 [ 3077.487061] ? snd_pcm_plug_format_plugins+0x487/0x1160 [ 3077.492419] snd_pcm_plugin_build_io+0x1c4/0x540 [ 3077.497171] ? io_playback_transfer+0x2d0/0x2d0 [ 3077.501849] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3077.507294] ? memset+0x20/0x40 [ 3077.510579] snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3077.516294] ? snd_pcm_plugin_append+0x190/0x190 [ 3077.521049] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.526497] ? fsnotify+0x974/0x11b0 [ 3077.528722] FAULT_INJECTION: forcing a failure. [ 3077.528722] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.530208] snd_pcm_oss_make_ready+0xbb/0x170 [ 3077.530220] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.530228] snd_pcm_oss_sync+0x1be/0x740 [ 3077.530243] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.558682] snd_pcm_oss_release+0x26b/0x2f0 [ 3077.563075] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.567380] __fput+0x25f/0x7a0 [ 3077.570642] task_work_run+0x11f/0x190 [ 3077.575352] exit_to_usermode_loop+0x1ad/0x200 [ 3077.579912] do_syscall_64+0x4a3/0x640 [ 3077.583783] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3077.588948] RIP: 0033:0x7fc02c0fe0d9 [ 3077.592634] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3077.600325] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3077.607571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3077.614828] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 07:03:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 12) [ 3077.622073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3077.629322] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3077.636583] CPU: 0 PID: 31936 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3077.644631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3077.653973] Call Trace: [ 3077.656554] dump_stack+0x1b2/0x281 [ 3077.660174] should_fail.cold+0x10a/0x149 [ 3077.664318] should_failslab+0xd6/0x130 [ 3077.668287] kmem_cache_alloc_node_trace+0x25a/0x400 07:03:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 11) [ 3077.673389] __kmalloc_node+0x38/0x70 [ 3077.677189] kvmalloc_node+0x88/0xd0 [ 3077.680897] snd_pcm_plugin_alloc+0x4cf/0x700 [ 3077.685390] ? snd_pcm_sw_params+0x7b5/0xcc0 [ 3077.689793] snd_pcm_plug_alloc+0x134/0x2e0 [ 3077.694115] snd_pcm_oss_change_params_locked+0x1c27/0x3550 [ 3077.699827] ? snd_pcm_plugin_append+0x190/0x190 [ 3077.700687] FAULT_INJECTION: forcing a failure. [ 3077.700687] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.704576] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.704598] ? fsnotify+0x974/0x11b0 [ 3077.724877] snd_pcm_oss_make_ready+0xbb/0x170 [ 3077.729463] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.733761] snd_pcm_oss_sync+0x1be/0x740 [ 3077.737895] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.742204] snd_pcm_oss_release+0x26b/0x2f0 [ 3077.746594] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.750896] __fput+0x25f/0x7a0 [ 3077.754164] task_work_run+0x11f/0x190 [ 3077.758046] exit_to_usermode_loop+0x1ad/0x200 [ 3077.762631] do_syscall_64+0x4a3/0x640 [ 3077.766504] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3077.771672] RIP: 0033:0x7f956e3280d9 [ 3077.775362] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3077.783049] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3077.790299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3077.797549] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.804801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3077.812051] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3077.819310] CPU: 1 PID: 31942 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3077.827193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3077.836544] Call Trace: [ 3077.839126] dump_stack+0x1b2/0x281 [ 3077.842752] should_fail.cold+0x10a/0x149 [ 3077.846898] should_failslab+0xd6/0x130 [ 3077.850867] __kmalloc+0x2c1/0x400 [ 3077.854407] ? snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.859069] snd_pcm_plugin_build+0x40d/0x6e0 [ 3077.863566] ? snd_pcm_plug_format_plugins+0x487/0x1160 [ 3077.868930] snd_pcm_plugin_build_io+0x1c4/0x540 [ 3077.873683] ? io_playback_transfer+0x2d0/0x2d0 [ 3077.878345] ? snd_pcm_oss_plugin_clear.isra.0+0xd0/0xd0 [ 3077.883789] ? memset+0x20/0x40 [ 3077.887066] snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3077.892780] ? snd_pcm_plugin_append+0x190/0x190 [ 3077.897540] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3077.902987] ? fsnotify+0x974/0x11b0 [ 3077.906701] snd_pcm_oss_make_ready+0xbb/0x170 [ 3077.911282] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.915596] snd_pcm_oss_sync+0x1be/0x740 [ 3077.919738] ? snd_pcm_oss_sync+0x740/0x740 07:03:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0xffffffff}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0xffffffff}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x88c1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000380)={0xf}) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000080)={0x6, 0x3, 0x4, 0xc008, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0x20, 0x5, 0x8, 0x1, "7f4cedc8"}, 0x9, 0x4, {}, 0xa44, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0xffffffff}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 1) [ 3077.924049] snd_pcm_oss_release+0x26b/0x2f0 [ 3077.928461] ? snd_pcm_oss_sync+0x740/0x740 [ 3077.933383] __fput+0x25f/0x7a0 [ 3077.936660] task_work_run+0x11f/0x190 [ 3077.940555] exit_to_usermode_loop+0x1ad/0x200 [ 3077.945132] do_syscall_64+0x4a3/0x640 [ 3077.949018] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3077.954199] RIP: 0033:0x7fc02c0fe0d9 [ 3077.956548] FAULT_INJECTION: forcing a failure. [ 3077.956548] name failslab, interval 1, probability 0, space 0, times 0 07:03:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 12) 07:03:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x941401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="61527296173b6e4a260aa128eec03e81032295b083793930dc5bb6f4bf3465c799415fdaca877d950fa81b06670a1effd0bb909dd64b67c2685b84f953b53271c5b83f8189cf33a53f6ed9edd5001a35211bce4425b98eb9d3f2d59d6f025ae0654b78bc78de68e67b49c91512381e8bce7513634566d30ebff556557b9c135544d08ad6c3b87f65699f081e986a9402fa9532871604d87a0277347b7ea0d31c6698c695734f23035971bd1e774d8e2df71aacc1b34173156d17aa4b71cd73961de69093c20242dbd8ccf2e34c4ba551715e620281c3976115ebc0e834ea", &(0x7f0000000140)=@udp=r0}, 0x20) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5a4b, 0x4, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x4, 0xa, 0x7, 0x0, "4fff9318"}, 0xabe8, 0x4, {}, 0x7, 0x0, r2}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000340)={0xb29, 0x7, 0x4, 0x100, 0x1, {r3, r4/1000+60000}, {0x4, 0x1, 0x7, 0x8, 0x0, 0x1f, "9c75c479"}, 0x8, 0x4, {}, 0x529, 0x0, r2}) [ 3077.957903] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3077.957914] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3077.957919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3077.957925] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.957930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3077.957936] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3078.001905] FAULT_INJECTION: forcing a failure. [ 3078.001905] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.052974] CPU: 1 PID: 31970 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3078.060870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3078.070214] Call Trace: [ 3078.072784] dump_stack+0x1b2/0x281 [ 3078.076392] should_fail.cold+0x10a/0x149 [ 3078.080532] should_failslab+0xd6/0x130 [ 3078.084500] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3078.089591] __kmalloc_node+0x38/0x70 [ 3078.093380] kvmalloc_node+0x88/0xd0 [ 3078.097084] snd_pcm_plugin_alloc+0x4cf/0x700 [ 3078.101562] ? snd_pcm_sw_params+0x7b5/0xcc0 [ 3078.105954] snd_pcm_plug_alloc+0x134/0x2e0 [ 3078.110261] snd_pcm_oss_change_params_locked+0x1c27/0x3550 [ 3078.115957] ? snd_pcm_plugin_append+0x190/0x190 [ 3078.120690] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3078.126121] ? fsnotify+0x974/0x11b0 [ 3078.129831] snd_pcm_oss_make_ready+0xbb/0x170 [ 3078.134929] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.139241] snd_pcm_oss_sync+0x1be/0x740 [ 3078.143392] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.147707] snd_pcm_oss_release+0x26b/0x2f0 [ 3078.152106] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.156410] __fput+0x25f/0x7a0 [ 3078.159671] task_work_run+0x11f/0x190 [ 3078.163550] exit_to_usermode_loop+0x1ad/0x200 [ 3078.168124] do_syscall_64+0x4a3/0x640 [ 3078.172019] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3078.177188] RIP: 0033:0x7fc02c0fe0d9 [ 3078.180876] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3078.188567] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3078.195815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:03:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 13) 07:03:20 executing program 1: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) [ 3078.203063] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.210311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.217558] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3078.224820] CPU: 0 PID: 31963 Comm: syz-executor.5 Not tainted 4.14.301-syzkaller #0 [ 3078.233226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3078.242572] Call Trace: [ 3078.245153] dump_stack+0x1b2/0x281 [ 3078.248783] should_fail.cold+0x10a/0x149 [ 3078.252929] should_failslab+0xd6/0x130 [ 3078.257684] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3078.262350] __vb2_init_fileio+0x17f/0xa90 [ 3078.266586] __vb2_perform_fileio+0x993/0xda0 [ 3078.271078] ? __vb2_init_fileio+0xa90/0xa90 [ 3078.275492] ? aa_file_perm+0x304/0xab0 [ 3078.279471] vb2_fop_read+0x1ef/0x3d0 [ 3078.283269] ? vb2_fop_write+0x3d0/0x3d0 [ 3078.287322] v4l2_read+0x19a/0x200 [ 3078.290859] __vfs_read+0xe4/0x620 [ 3078.294392] ? v4l2_write+0x200/0x200 [ 3078.298183] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3078.303108] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3078.307689] ? common_file_perm+0x3ee/0x580 [ 3078.312000] ? lock_acquire+0x170/0x3f0 [ 3078.315973] ? security_file_permission+0x82/0x1e0 [ 3078.320900] ? rw_verify_area+0xe1/0x2a0 [ 3078.324955] vfs_read+0x139/0x340 [ 3078.328400] SyS_read+0xf2/0x210 [ 3078.331758] ? kernel_write+0x110/0x110 [ 3078.335723] ? __do_page_fault+0x159/0xad0 [ 3078.337393] FAULT_INJECTION: forcing a failure. [ 3078.337393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3078.339951] ? do_syscall_64+0x4c/0x640 [ 3078.355670] ? kernel_write+0x110/0x110 [ 3078.359624] do_syscall_64+0x1d5/0x640 [ 3078.363496] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3078.368661] RIP: 0033:0x7f833f4760d9 [ 3078.372349] RSP: 002b:00007f833d9e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3078.380036] RAX: ffffffffffffffda RBX: 00007f833f595f80 RCX: 00007f833f4760d9 [ 3078.387284] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3078.394530] RBP: 00007f833d9e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.401775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3078.409023] R13: 00007fffa4e49b3f R14: 00007f833d9e8300 R15: 0000000000022000 [ 3078.416283] CPU: 1 PID: 31988 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3078.424150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3078.433496] Call Trace: [ 3078.436071] dump_stack+0x1b2/0x281 [ 3078.439676] should_fail.cold+0x10a/0x149 [ 3078.443801] __alloc_pages_nodemask+0x21e/0x2900 [ 3078.448531] ? depot_save_stack+0x10d/0x3f0 [ 3078.453259] ? __lock_acquire+0x5fc/0x3f20 [ 3078.457466] ? snd_pcm_plugin_build_io+0x1c4/0x540 [ 3078.462368] ? snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3078.468225] ? snd_pcm_oss_make_ready+0xbb/0x170 [ 3078.472950] ? snd_pcm_oss_sync+0x1be/0x740 [ 3078.477240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3078.482053] ? __lock_acquire+0x5fc/0x3f20 [ 3078.486258] ? fs_reclaim_release+0xd0/0x110 [ 3078.490639] ? trace_hardirqs_on+0x10/0x10 [ 3078.494846] cache_grow_begin+0x91/0x700 [ 3078.498888] ? fs_reclaim_release+0xd0/0x110 [ 3078.503268] ? check_preemption_disabled+0x35/0x240 [ 3078.508254] cache_alloc_refill+0x273/0x350 [ 3078.512554] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 3078.517631] __kmalloc_node+0x38/0x70 [ 3078.521464] kvmalloc_node+0x88/0xd0 [ 3078.525207] snd_pcm_plugin_alloc+0x4cf/0x700 [ 3078.529694] ? snd_pcm_sw_params+0x7b5/0xcc0 [ 3078.534084] snd_pcm_plug_alloc+0x134/0x2e0 [ 3078.538394] snd_pcm_oss_change_params_locked+0x1c27/0x3550 [ 3078.544086] ? snd_pcm_plugin_append+0x190/0x190 [ 3078.548816] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3078.554262] ? fsnotify+0x974/0x11b0 [ 3078.557950] snd_pcm_oss_make_ready+0xbb/0x170 [ 3078.562503] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.566810] snd_pcm_oss_sync+0x1be/0x740 [ 3078.570946] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.575250] snd_pcm_oss_release+0x26b/0x2f0 [ 3078.579633] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.583947] __fput+0x25f/0x7a0 [ 3078.587201] task_work_run+0x11f/0x190 [ 3078.591069] exit_to_usermode_loop+0x1ad/0x200 [ 3078.595621] do_syscall_64+0x4a3/0x640 [ 3078.599483] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 07:03:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, 0x0, 0x0) 07:03:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 13) 07:03:21 executing program 1: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x941401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="61527296173b6e4a260aa128eec03e81032295b083793930dc5bb6f4bf3465c799415fdaca877d950fa81b06670a1effd0bb909dd64b67c2685b84f953b53271c5b83f8189cf33a53f6ed9edd5001a35211bce4425b98eb9d3f2d59d6f025ae0654b78bc78de68e67b49c91512381e8bce7513634566d30ebff556557b9c135544d08ad6c3b87f65699f081e986a9402fa9532871604d87a0277347b7ea0d31c6698c695734f23035971bd1e774d8e2df71aacc1b34173156d17aa4b71cd73961de69093c20242dbd8ccf2e34c4ba551715e620281c3976115ebc0e834ea", &(0x7f0000000140)=@udp=r0}, 0x20) (async) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5a4b, 0x4, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x4, 0xa, 0x7, 0x0, "4fff9318"}, 0xabe8, 0x4, {}, 0x7, 0x0, r2}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000340)={0xb29, 0x7, 0x4, 0x100, 0x1, {r3, r4/1000+60000}, {0x4, 0x1, 0x7, 0x8, 0x0, 0x1f, "9c75c479"}, 0x8, 0x4, {}, 0x529, 0x0, r2}) 07:03:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (fail_nth: 2) 07:03:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 14) [ 3078.604645] RIP: 0033:0x7f956e3280d9 [ 3078.608328] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3078.616008] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3078.623250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3078.631968] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.639207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.646447] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3078.700603] FAULT_INJECTION: forcing a failure. [ 3078.700603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3078.712421] CPU: 1 PID: 31994 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3078.717284] FAULT_INJECTION: forcing a failure. [ 3078.717284] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.720298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3078.720302] Call Trace: [ 3078.720316] dump_stack+0x1b2/0x281 [ 3078.720331] should_fail.cold+0x10a/0x149 [ 3078.751130] __alloc_pages_nodemask+0x21e/0x2900 [ 3078.755873] ? depot_save_stack+0x10d/0x3f0 [ 3078.760182] ? __lock_acquire+0x5fc/0x3f20 [ 3078.764405] ? snd_pcm_plugin_build_io+0x1c4/0x540 [ 3078.769314] ? snd_pcm_oss_change_params_locked+0x2d61/0x3550 [ 3078.775179] ? snd_pcm_oss_make_ready+0xbb/0x170 [ 3078.779911] ? snd_pcm_oss_sync+0x1be/0x740 [ 3078.784210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3078.789131] ? __lock_acquire+0x5fc/0x3f20 [ 3078.793344] ? fs_reclaim_release+0xd0/0x110 [ 3078.797740] ? trace_hardirqs_on+0x10/0x10 [ 3078.802328] cache_grow_begin+0x91/0x700 [ 3078.806366] ? fs_reclaim_release+0xd0/0x110 [ 3078.810754] ? check_preemption_disabled+0x35/0x240 [ 3078.815753] cache_alloc_refill+0x273/0x350 [ 3078.820060] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 3078.825151] __kmalloc_node+0x38/0x70 [ 3078.828929] kvmalloc_node+0x88/0xd0 [ 3078.832622] snd_pcm_plugin_alloc+0x4cf/0x700 [ 3078.837097] ? snd_pcm_sw_params+0x7b5/0xcc0 [ 3078.841497] snd_pcm_plug_alloc+0x134/0x2e0 [ 3078.845804] snd_pcm_oss_change_params_locked+0x1c27/0x3550 [ 3078.851508] ? snd_pcm_plugin_append+0x190/0x190 [ 3078.856245] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3078.861683] ? fsnotify+0x974/0x11b0 [ 3078.865379] snd_pcm_oss_make_ready+0xbb/0x170 [ 3078.869938] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.874237] snd_pcm_oss_sync+0x1be/0x740 [ 3078.878372] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.882670] snd_pcm_oss_release+0x26b/0x2f0 [ 3078.887055] ? snd_pcm_oss_sync+0x740/0x740 [ 3078.891363] __fput+0x25f/0x7a0 [ 3078.894624] task_work_run+0x11f/0x190 [ 3078.898497] exit_to_usermode_loop+0x1ad/0x200 [ 3078.903062] do_syscall_64+0x4a3/0x640 [ 3078.906935] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3078.912099] RIP: 0033:0x7fc02c0fe0d9 [ 3078.915873] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3078.923560] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3078.930808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3078.938055] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 07:03:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x941401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="61527296173b6e4a260aa128eec03e81032295b083793930dc5bb6f4bf3465c799415fdaca877d950fa81b06670a1effd0bb909dd64b67c2685b84f953b53271c5b83f8189cf33a53f6ed9edd5001a35211bce4425b98eb9d3f2d59d6f025ae0654b78bc78de68e67b49c91512381e8bce7513634566d30ebff556557b9c135544d08ad6c3b87f65699f081e986a9402fa9532871604d87a0277347b7ea0d31c6698c695734f23035971bd1e774d8e2df71aacc1b34173156d17aa4b71cd73961de69093c20242dbd8ccf2e34c4ba551715e620281c3976115ebc0e834ea", &(0x7f0000000140)=@udp=r0}, 0x20) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5a4b, 0x4, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x4, 0xa, 0x7, 0x0, "4fff9318"}, 0xabe8, 0x4, {}, 0x7, 0x0, r2}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000340)={0xb29, 0x7, 0x4, 0x100, 0x1, {r3, r4/1000+60000}, {0x4, 0x1, 0x7, 0x8, 0x0, 0x1f, "9c75c479"}, 0x8, 0x4, {}, 0x529, 0x0, r2}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x941401, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="61527296173b6e4a260aa128eec03e81032295b083793930dc5bb6f4bf3465c799415fdaca877d950fa81b06670a1effd0bb909dd64b67c2685b84f953b53271c5b83f8189cf33a53f6ed9edd5001a35211bce4425b98eb9d3f2d59d6f025ae0654b78bc78de68e67b49c91512381e8bce7513634566d30ebff556557b9c135544d08ad6c3b87f65699f081e986a9402fa9532871604d87a0277347b7ea0d31c6698c695734f23035971bd1e774d8e2df71aacc1b34173156d17aa4b71cd73961de69093c20242dbd8ccf2e34c4ba551715e620281c3976115ebc0e834ea", &(0x7f0000000140)=@udp=r0}, 0x20) (async) close$fd_v4l2_buffer(r0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5a4b, 0x4, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x4, 0xa, 0x7, 0x0, "4fff9318"}, 0xabe8, 0x4, {}, 0x7, 0x0, r2}) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) (async) clock_gettime(0x0, &(0x7f0000000300)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000340)={0xb29, 0x7, 0x4, 0x100, 0x1, {r3, r4/1000+60000}, {0x4, 0x1, 0x7, 0x8, 0x0, 0x1f, "9c75c479"}, 0x8, 0x4, {}, 0x529, 0x0, r2}) (async) 07:03:21 executing program 1: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(0xffffffffffffffff, &(0x7f0000000980)=""/4096, 0x1000) 07:03:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3078.945307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.952555] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3078.959814] CPU: 0 PID: 32001 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3078.967695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3078.977046] Call Trace: [ 3078.979631] dump_stack+0x1b2/0x281 [ 3078.983261] should_fail.cold+0x10a/0x149 [ 3078.987406] should_failslab+0xd6/0x130 [ 3078.991376] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3078.996478] __kmalloc_node+0x38/0x70 07:03:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3079.000276] kvmalloc_node+0x46/0xd0 [ 3079.003993] snd_pcm_oss_change_params_locked+0x1ef4/0x3550 [ 3079.009712] ? snd_pcm_plugin_append+0x190/0x190 [ 3079.014466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3079.019919] ? fsnotify+0x974/0x11b0 [ 3079.023637] snd_pcm_oss_make_ready+0xbb/0x170 [ 3079.028218] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.032540] snd_pcm_oss_sync+0x1be/0x740 [ 3079.036690] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.041014] snd_pcm_oss_release+0x26b/0x2f0 [ 3079.045420] ? snd_pcm_oss_sync+0x740/0x740 07:03:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3079.049733] __fput+0x25f/0x7a0 [ 3079.053015] task_work_run+0x11f/0x190 [ 3079.056903] exit_to_usermode_loop+0x1ad/0x200 [ 3079.061485] do_syscall_64+0x4a3/0x640 [ 3079.065373] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.070558] RIP: 0033:0x7f956e3280d9 [ 3079.074261] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3079.081962] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 [ 3079.089230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 07:03:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 14) 07:03:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x941401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="61527296173b6e4a260aa128eec03e81032295b083793930dc5bb6f4bf3465c799415fdaca877d950fa81b06670a1effd0bb909dd64b67c2685b84f953b53271c5b83f8189cf33a53f6ed9edd5001a35211bce4425b98eb9d3f2d59d6f025ae0654b78bc78de68e67b49c91512381e8bce7513634566d30ebff556557b9c135544d08ad6c3b87f65699f081e986a9402fa9532871604d87a0277347b7ea0d31c6698c695734f23035971bd1e774d8e2df71aacc1b34173156d17aa4b71cd73961de69093c20242dbd8ccf2e34c4ba551715e620281c3976115ebc0e834ea", &(0x7f0000000140)=@udp=r0}, 0x20) close$fd_v4l2_buffer(r0) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x26400, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5a4b, 0x4, 0x4, 0x40, 0x5, {0x0, 0x2710}, {0x2, 0x8, 0x4, 0xa, 0x7, 0x0, "4fff9318"}, 0xabe8, 0x4, {}, 0x7, 0x0, r2}) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000340)={0xb29, 0x7, 0x4, 0x100, 0x1, {r3, r4/1000+60000}, {0x4, 0x1, 0x7, 0x8, 0x0, 0x1f, "9c75c479"}, 0x8, 0x4, {}, 0x529, 0x0, r2}) 07:03:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000180)={@private=0xa010101, 0x0, 0x0, 0xfffffffffffffdb3, 0x0, [{@private}, {@multicast2}, {@private}, {@broadcast}, {@dev}, {@loopback}, {@broadcast}, {@broadcast}]}}) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 15) [ 3079.096501] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.103767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.111036] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 07:03:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2a0403, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3079.167631] FAULT_INJECTION: forcing a failure. [ 3079.167631] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.195028] CPU: 0 PID: 32039 Comm: syz-executor.4 Not tainted 4.14.301-syzkaller #0 [ 3079.202930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3079.212276] Call Trace: [ 3079.214859] dump_stack+0x1b2/0x281 [ 3079.218494] should_fail.cold+0x10a/0x149 [ 3079.222643] should_failslab+0xd6/0x130 [ 3079.226615] kmem_cache_alloc_node_trace+0x25a/0x400 [ 3079.231717] __kmalloc_node+0x38/0x70 [ 3079.235511] kvmalloc_node+0x46/0xd0 [ 3079.239222] snd_pcm_oss_change_params_locked+0x1ef4/0x3550 [ 3079.244937] ? snd_pcm_plugin_append+0x190/0x190 [ 3079.246948] FAULT_INJECTION: forcing a failure. [ 3079.246948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3079.249687] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3079.266884] ? fsnotify+0x974/0x11b0 [ 3079.270584] snd_pcm_oss_make_ready+0xbb/0x170 [ 3079.275148] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.279447] snd_pcm_oss_sync+0x1be/0x740 [ 3079.283573] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.287873] snd_pcm_oss_release+0x26b/0x2f0 [ 3079.292258] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.296555] __fput+0x25f/0x7a0 [ 3079.299817] task_work_run+0x11f/0x190 [ 3079.303687] exit_to_usermode_loop+0x1ad/0x200 [ 3079.308248] do_syscall_64+0x4a3/0x640 [ 3079.312118] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.317286] RIP: 0033:0x7fc02c0fe0d9 [ 3079.320974] RSP: 002b:00007fc02a670168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3079.328671] RAX: 0000000000000000 RBX: 00007fc02c21df80 RCX: 00007fc02c0fe0d9 [ 3079.335915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3079.343162] RBP: 00007fc02a6701d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.350409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.357657] R13: 00007fff14ee59df R14: 00007fc02a670300 R15: 0000000000022000 [ 3079.364928] CPU: 1 PID: 32046 Comm: syz-executor.2 Not tainted 4.14.301-syzkaller #0 [ 3079.372808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3079.382154] Call Trace: [ 3079.384742] dump_stack+0x1b2/0x281 [ 3079.388371] should_fail.cold+0x10a/0x149 [ 3079.392518] ? depot_save_stack+0x10d/0x3f0 [ 3079.393685] ================================================================== [ 3079.396832] __alloc_pages_nodemask+0x21e/0x2900 [ 3079.396845] ? kasan_kmalloc+0x139/0x160 [ 3079.404310] BUG: KASAN: use-after-free in __vb2_perform_fileio+0xce9/0xda0 [ 3079.409039] ? __lock_acquire+0x5fc/0x3f20 [ 3079.413071] Read of size 4 at addr ffff8880aeb26c5c by task syz-executor.0/32041 [ 3079.420057] ? fs_reclaim_release+0xd0/0x110 [ 3079.424258] [ 3079.431767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3079.442555] ? cache_alloc_refill+0x2fa/0x350 [ 3079.447030] ? lock_downgrade+0x740/0x740 [ 3079.451162] cache_grow_begin+0x91/0x700 [ 3079.455198] ? fs_reclaim_release+0xd0/0x110 [ 3079.459584] ? check_preemption_disabled+0x35/0x240 [ 3079.464579] cache_alloc_refill+0x273/0x350 [ 3079.468881] kmem_cache_alloc_node_trace+0x3e5/0x400 [ 3079.473961] __kmalloc_node+0x38/0x70 [ 3079.477740] kvmalloc_node+0x46/0xd0 [ 3079.481435] snd_pcm_oss_change_params_locked+0x1ef4/0x3550 [ 3079.487128] ? snd_pcm_plugin_append+0x190/0x190 [ 3079.491861] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3079.497292] ? fsnotify+0x974/0x11b0 [ 3079.500989] snd_pcm_oss_make_ready+0xbb/0x170 [ 3079.505549] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.509845] snd_pcm_oss_sync+0x1be/0x740 [ 3079.513969] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.518270] snd_pcm_oss_release+0x26b/0x2f0 [ 3079.522657] ? snd_pcm_oss_sync+0x740/0x740 [ 3079.526957] __fput+0x25f/0x7a0 [ 3079.530221] task_work_run+0x11f/0x190 [ 3079.534586] exit_to_usermode_loop+0x1ad/0x200 [ 3079.539145] do_syscall_64+0x4a3/0x640 [ 3079.543010] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.548175] RIP: 0033:0x7f956e3280d9 [ 3079.551865] RSP: 002b:00007f956c89a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3079.559551] RAX: 0000000000000000 RBX: 00007f956e447f80 RCX: 00007f956e3280d9 07:03:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000180)={@private=0xa010101, 0x0, 0x0, 0xfffffffffffffdb3, 0x0, [{@private}, {@multicast2}, {@private}, {@broadcast}, {@dev}, {@loopback}, {@broadcast}, {@broadcast}]}}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3079.566800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3079.574045] RBP: 00007f956c89a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.581290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.588535] R13: 00007ffd8948babf R14: 00007f956c89a300 R15: 0000000000022000 [ 3079.595793] CPU: 0 PID: 32041 Comm: syz-executor.0 Not tainted 4.14.301-syzkaller #0 [ 3079.604446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3079.613794] Call Trace: 07:03:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) (fail_nth: 15) 07:03:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) [ 3079.616379] dump_stack+0x1b2/0x281 [ 3079.620132] print_address_description.cold+0x54/0x1d3 [ 3079.625416] kasan_report_error.cold+0x8a/0x191 [ 3079.630272] ? __vb2_perform_fileio+0xce9/0xda0 [ 3079.634948] __asan_report_load4_noabort+0x68/0x70 [ 3079.639879] ? __vb2_perform_fileio+0xce9/0xda0 [ 3079.644545] __vb2_perform_fileio+0xce9/0xda0 [ 3079.649046] ? __vb2_init_fileio+0xa90/0xa90 [ 3079.653453] ? aa_file_perm+0x304/0xab0 [ 3079.657423] vb2_fop_read+0x1ef/0x3d0 [ 3079.661231] ? vb2_fop_write+0x3d0/0x3d0 [ 3079.665284] v4l2_read+0x19a/0x200 07:03:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x202240, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00'}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0xfffffc00, 0x6}) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0xd38, 0x8, 0x1080, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0)="385943083077b2ef71160706805ef5340900a95ff7d780cc4f563b28273a5352490dd5bd7861c29a9bc5e0cb86274e0870961fe2ebe838a6d5f2a60d7d37fea6b8b29d42bd7967ae39eb51a090e0ab58bd3dd32e35e08f052b24fb6b7d1277c88859fe4e2df8b794ab4e97a3ff0aea85731513ac1d2475ae39664c575e0e4866573cd052f4df29394ae4a29845d70bdcc1bffe0c", &(0x7f0000000580)=@tcp=r0, 0x5}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x6, 0x1, "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"}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xe0200, 0x0) recvfrom$phonet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x32002, &(0x7f00000002c0)={0x23, 0x3, 0x3, 0x6}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x703403, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x1, 0x7, 0x8, 0xe2, 0x64, 0x6, &(0x7f00000000c0)="b4aff52451858ed1e25489c2c908ff341c67e961015f3158935bbf499fcd80a31fd826464516538cd393949cde73fc0433bd82a1a7ccfbdd08ac38c017793872296f211b0f5f689147173ab44b22d61357e0d26606ea7f9433750fb99443382e2f6614d5"}) [ 3079.668824] __vfs_read+0xe4/0x620 [ 3079.672361] ? v4l2_write+0x200/0x200 [ 3079.676159] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3079.680788] ? common_file_perm+0x3ee/0x580 [ 3079.685102] ? lock_acquire+0x170/0x3f0 [ 3079.689077] ? security_file_permission+0x82/0x1e0 [ 3079.694004] ? rw_verify_area+0xe1/0x2a0 [ 3079.698061] vfs_read+0x139/0x340 [ 3079.701513] SyS_read+0xf2/0x210 [ 3079.704878] ? kernel_write+0x110/0x110 [ 3079.708844] ? fput_many+0xe/0x140 [ 3079.712377] ? do_syscall_64+0x4c/0x640 [ 3079.716353] ? kernel_write+0x110/0x110 07:03:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close$fd_v4l2_buffer(r0) syz_open_dev$vivid(0x0, 0x2, 0x2) read$usbfs(r0, &(0x7f0000000980)=""/4096, 0x1000) 07:03:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x202240, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00'}) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0xfffffc00, 0x6}) close$fd_v4l2_buffer(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async, rerun: 32) close$fd_v4l2_buffer(r0) (async, rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0xd38, 0x8, 0x1080, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x6}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0)="385943083077b2ef71160706805ef5340900a95ff7d780cc4f563b28273a5352490dd5bd7861c29a9bc5e0cb86274e0870961fe2ebe838a6d5f2a60d7d37fea6b8b29d42bd7967ae39eb51a090e0ab58bd3dd32e35e08f052b24fb6b7d1277c88859fe4e2df8b794ab4e97a3ff0aea85731513ac1d2475ae39664c575e0e4866573cd052f4df29394ae4a29845d70bdcc1bffe0c", &(0x7f0000000580)=@tcp=r0, 0x5}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2c2b80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x6, 0x1, "ac069d72384ec99b32d4ac8f2bde58d3ed062cb2941164ab077f2ca1e5373dbcd1086ba4b5aa1a7ca5b661fb4df5a8cb56f62e1cea78bd68efc85cdbc52a597ccfbae25bfcdbc678a0fb6e4e05c2c0fc8844e67629b40375642fa66b49a7fee44dd2ed683d18ad9df6f57491bb6d59eb1c396f99380a9119525bfd8281a927793e089c2bc9134418e619b3ce119dcd324973b61883223a6233ca05203158e65e330ef2fd27b9b56bf81848fd0b8234aa5f2dd380c921e88c2c1b6dea04e82327b8f8c7425e18f6e88f2a3f94f216243cc5a5d9788c02775a723e023bd870fe9ed3dfd2c60d76c7c2eb7455635e008f0bf7efc7508d40afc246e0fddd22277e09"}) (async, rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xe0200, 0x0) (async, rerun: 32) recvfrom$phonet(r0, &(0x7f0000000200)=""/160, 0xa0, 0x32002, &(0x7f00000002c0)={0x23, 0x3, 0x3, 0x6}, 0x10) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x703403, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x1, 0x7, 0x8, 0xe2, 0x64, 0x6, &(0x7f00000000c0)="b4aff52451858ed1e25489c2c908ff341c67e961015f3158935bbf499fcd80a31fd826464516538cd393949cde73fc0433bd82a1a7ccfbdd08ac38c017793872296f211b0f5f689147173ab44b22d61357e0d26606ea7f9433750fb99443382e2f6614d5"}) [ 3079.720321] do_syscall_64+0x1d5/0x640 [ 3079.724208] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.729391] RIP: 0033:0x7f169ad840d9 [ 3079.733091] RSP: 002b:00007f16992f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3079.740802] RAX: ffffffffffffffda RBX: 00007f169aea3f80 RCX: 00007f169ad840d9 [ 3079.748068] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3079.755337] RBP: 00007f169addfae9 R08: 0000000000000000 R09: 0000000000000000 [ 3079.762607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3079.769871] R13: 00007ffdfbfce58f R14: 00007f16992f6300 R15: 0000000000022000 [ 3079.777141] [ 3079.778757] Allocated by task 32041: [ 3079.782462] kasan_kmalloc+0xeb/0x160 [ 3079.786257] kmem_cache_alloc_trace+0x131/0x3d0 [ 3079.790920] __vb2_init_fileio+0x17f/0xa90 [ 3079.795147] __vb2_perform_fileio+0x993/0xda0 [ 3079.799638] vb2_fop_read+0x1ef/0x3d0 [ 3079.803432] v4l2_read+0x19a/0x200 [ 3079.806964] __vfs_read+0xe4/0x620 [ 3079.810499] vfs_read+0x139/0x340 [ 3079.813943] SyS_read+0xf2/0x210 [ 3079.817304] do_syscall_64+0x1d5/0x640 [ 3079.821178] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.826335] [ 3079.827936] Freed by task 32036: [ 3079.831274] kasan_slab_free+0xc3/0x1a0 [ 3079.835220] kfree+0xc9/0x250 [ 3079.838300] __vb2_cleanup_fileio+0xf5/0x150 [ 3079.842687] vb2_core_queue_release+0x17/0x70 [ 3079.847160] _vb2_fop_release+0x1c1/0x280 [ 3079.851334] vivid_fop_release+0x17d/0x6c0 [ 3079.855539] v4l2_release+0xf4/0x190 [ 3079.859235] __fput+0x25f/0x7a0 [ 3079.862487] task_work_run+0x11f/0x190 [ 3079.866345] exit_to_usermode_loop+0x1ad/0x200 [ 3079.870896] do_syscall_64+0x4a3/0x640 [ 3079.874763] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3079.879922] [ 3079.881523] The buggy address belongs to the object at ffff8880aeb26940 [ 3079.881523] which belongs to the cache kmalloc-1024 of size 1024 [ 3079.894331] The buggy address is located 796 bytes inside of [ 3079.894331] 1024-byte region [ffff8880aeb26940, ffff8880aeb26d40) [ 3079.906270] The buggy address belongs to the page: [ 3079.911178] page:ffffea0002bac980 count:1 mapcount:0 mapping:ffff8880aeb26040 index:0x0 compound_mapcount: 0 [ 3079.921116] flags: 0xfff00000008100(slab|head) [ 3079.925680] raw: 00fff00000008100 ffff8880aeb26040 0000000000000000 0000000100000007 [ 3079.933539] raw: ffffea0002d0cca0 ffffea00024d3420 ffff88813fe74ac0 0000000000000000 [ 3079.941395] page dumped because: kasan: bad access detected [ 3079.947086] [ 3079.948687] Memory state around the buggy address: [ 3079.953587] ffff8880aeb26b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3079.960916] ffff8880aeb26b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3079.968253] >ffff8880aeb26c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3079.975580] ^ [ 3079.981826] ffff8880aeb26c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3079.989159] ffff8880aeb26d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3079.996503] ================================================================== [ 3080.003847] Disabling lock debugging due to kernel taint [ 3080.010200] Kernel panic - not syncing: panic_on_warn set ... [ 3080.010200] [ 3080.017644] CPU: 0 PID: 32041 Comm: syz-executor.0 Tainted: G B 4.14.301-syzkaller #0 [ 3080.026725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 3080.036065] Call Trace: [ 3080.038643] dump_stack+0x1b2/0x281 [ 3080.042281] panic+0x1f9/0x42d [ 3080.045472] ? add_taint.cold+0x16/0x16 [ 3080.049438] ? ___preempt_schedule+0x16/0x18 [ 3080.053839] kasan_end_report+0x43/0x49 [ 3080.057800] kasan_report_error.cold+0xa7/0x191 [ 3080.062458] ? __vb2_perform_fileio+0xce9/0xda0 [ 3080.067101] __asan_report_load4_noabort+0x68/0x70 [ 3080.072014] ? __vb2_perform_fileio+0xce9/0xda0 [ 3080.076657] __vb2_perform_fileio+0xce9/0xda0 [ 3080.081124] ? __vb2_init_fileio+0xa90/0xa90 [ 3080.085507] ? aa_file_perm+0x304/0xab0 [ 3080.089453] vb2_fop_read+0x1ef/0x3d0 [ 3080.093225] ? vb2_fop_write+0x3d0/0x3d0 [ 3080.097262] v4l2_read+0x19a/0x200 [ 3080.100781] __vfs_read+0xe4/0x620 [ 3080.104294] ? v4l2_write+0x200/0x200 [ 3080.108066] ? vfs_copy_file_range+0x9b0/0x9b0 [ 3080.112620] ? common_file_perm+0x3ee/0x580 [ 3080.116918] ? lock_acquire+0x170/0x3f0 [ 3080.120870] ? security_file_permission+0x82/0x1e0 [ 3080.125771] ? rw_verify_area+0xe1/0x2a0 [ 3080.129803] vfs_read+0x139/0x340 [ 3080.133228] SyS_read+0xf2/0x210 [ 3080.136564] ? kernel_write+0x110/0x110 [ 3080.140517] ? fput_many+0xe/0x140 [ 3080.144034] ? do_syscall_64+0x4c/0x640 [ 3080.147977] ? kernel_write+0x110/0x110 [ 3080.151920] do_syscall_64+0x1d5/0x640 [ 3080.155781] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 3080.160940] RIP: 0033:0x7f169ad840d9 [ 3080.164621] RSP: 002b:00007f16992f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3080.172298] RAX: ffffffffffffffda RBX: 00007f169aea3f80 RCX: 00007f169ad840d9 [ 3080.179540] RDX: 0000000000001000 RSI: 0000000020000980 RDI: 0000000000000003 [ 3080.186781] RBP: 00007f169addfae9 R08: 0000000000000000 R09: 0000000000000000 [ 3080.194021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3080.201261] R13: 00007ffdfbfce58f R14: 00007f16992f6300 R15: 0000000000022000 [ 3080.208647] Kernel Offset: disabled [ 3080.212250] Rebooting in 86400 seconds..