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", &(0x7f0000000040)=@tcp6, 0x4}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x244281, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) msgget$private(0x0, 0x419) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x5, 0x4, 0x0, 0x1, {r1, r2/1000+10000}, {0x2, 0x2, 0x0, 0x8, 0x7f, 0x9, "8cb5dbcd"}, 0x7, 0x4, {}, 0x5}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000001240)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "92b8d955"}, 0xb5bf, 0x4, {}, 0x0, 0x0, r4}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000012c0)={0xe8, 0xc, 0x4, 0x1000, 0xb71, {0x77359400}, {0x5, 0x8, 0x0, 0x6, 0xff, 0x7, "cd828891"}, 0x6, 0x4, {}, 0x1}) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'ipvlan0\x00'}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xa2de, 0x6, 0x23}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r0, 0x30, 0x0, @in={0x2, 0x4e21, @local}}}, 0xa0) pkey_alloc(0x0, 0x2) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x5, 0x7, 0x3, 0x7, 0xb4, 0x6, 0x3, 0x6, 0x1, 0x3, 0x64, "e2a4f05e8b1c8e9f58a34ac5fdfc42e5dd379669cd363876d9785e3923f963e5"}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x5, 0x7, 0x3, 0x7, 0xb4, 0x6, 0x3, 0x6, 0x1, 0x3, 0x64, "e2a4f05e8b1c8e9f58a34ac5fdfc42e5dd379669cd363876d9785e3923f963e5"}) (async) 03:49:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x480000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) read$char_usb(r0, 0x0, 0x0) 03:49:20 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240)="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", &(0x7f0000000040)=@tcp6, 0x4}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x244281, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) msgget$private(0x0, 0x419) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x5, 0x4, 0x0, 0x1, {r1, r2/1000+10000}, {0x2, 0x2, 0x0, 0x8, 0x7f, 0x9, "8cb5dbcd"}, 0x7, 0x4, {}, 0x5}) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000001240)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "92b8d955"}, 0xb5bf, 0x4, {}, 0x0, 0x0, r4}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000012c0)={0xe8, 0xc, 0x4, 0x1000, 0xb71, {0x77359400}, {0x5, 0x8, 0x0, 0x6, 0xff, 0x7, "cd828891"}, 0x6, 0x4, {}, 0x1}) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xa2de, 0x6, 0x23}, 0x8) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r0, 0x30, 0x0, @in={0x2, 0x4e21, @local}}}, 0xa0) (async) pkey_alloc(0x0, 0x2) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'ipvlan0\x00'}) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (rerun: 64) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x5, 0x7, 0x3, 0x7, 0xb4, 0x6, 0x3, 0x6, 0x1, 0x3, 0x64, "e2a4f05e8b1c8e9f58a34ac5fdfc42e5dd379669cd363876d9785e3923f963e5"}) 03:49:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) read$char_usb(r0, 0x0, 0x0) 03:49:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x7, 0xa2de, 0x6, 0x23}, 0x8) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r0, 0x30, 0x0, @in={0x2, 0x4e21, @local}}}, 0xa0) pkey_alloc(0x0, 0x2) 03:49:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) read$char_usb(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) (async) read$char_usb(r0, 0x0, 0x0) (async) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0xfffffffffffffffe, 0x0, {0xed, 0x20, 0x0, {0x0, 0x947c, 0x8000000000000000, 0x8, 0x9000000, 0x7fffffffffffffff, 0x4, 0xbf4, 0xfffffffa, 0x6000, 0x20, 0xffffffffffffffff, 0xee00, 0x2, 0xf28}}}, 0x78) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x400, 0x7, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x8, 0x1, 0x4, "239c1fcb"}, 0x0, 0x4, {}, 0xff, 0x0, r1}) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) 03:49:20 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240)="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", &(0x7f0000000040)=@tcp6, 0x4}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) (async, rerun: 64) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x244281, 0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) msgget$private(0x0, 0x419) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x5, 0x4, 0x0, 0x1, {r1, r2/1000+10000}, {0x2, 0x2, 0x0, 0x8, 0x7f, 0x9, "8cb5dbcd"}, 0x7, 0x4, {}, 0x5}) (async) r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000001240)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "92b8d955"}, 0xb5bf, 0x4, {}, 0x0, 0x0, r4}) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000012c0)={0xe8, 0xc, 0x4, 0x1000, 0xb71, {0x77359400}, {0x5, 0x8, 0x0, 0x6, 0xff, 0x7, "cd828891"}, 0x6, 0x4, {}, 0x1}) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 03:49:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) read$char_usb(r0, 0x0, 0x0) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0xfffffffffffffffe, 0x0, {0xed, 0x20, 0x0, {0x0, 0x947c, 0x8000000000000000, 0x8, 0x9000000, 0x7fffffffffffffff, 0x4, 0xbf4, 0xfffffffa, 0x6000, 0x20, 0xffffffffffffffff, 0xee00, 0x2, 0xf28}}}, 0x78) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x400, 0x7, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x8, 0x1, 0x4, "239c1fcb"}, 0x0, 0x4, {}, 0xff, 0x0, r1}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x400, 0x7, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x8, 0x1, 0x4, "239c1fcb"}, 0x0, 0x4, {}, 0xff, 0x0, r1}) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) 03:49:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1213.737833] QAT: failed to copy from user cfg_data. 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 03:49:20 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (rerun: 32) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0xfffffffffffffffe, 0x0, {0xed, 0x20, 0x0, {0x0, 0x947c, 0x8000000000000000, 0x8, 0x9000000, 0x7fffffffffffffff, 0x4, 0xbf4, 0xfffffffa, 0x6000, 0x20, 0xffffffffffffffff, 0xee00, 0x2, 0xf28}}}, 0x78) 03:49:20 executing program 1: pkey_free(0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2300) read$char_usb(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffff80, 0x248c82) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 03:49:20 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x400, 0x7, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x8, 0x1, 0x4, "239c1fcb"}, 0x0, 0x4, {}, 0xff, 0x0, r1}) openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) 03:49:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x408800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000380)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440)=[{}, {0x80000000, 0x0}], &(0x7f0000000480)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x9, 0x9]}, {r1, r2, 0x2, [0x5, 0x7]}, 0x0, [0xfffffff9]}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x25}, 0x10) [ 1213.837446] QAT: failed to copy from user cfg_data. 03:49:20 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x579700) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0) 03:49:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8}, 0x8) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:20 executing program 1: pkey_free(0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2300) read$char_usb(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffff80, 0x248c82) pkey_free(0xffffffffffffffff) (async) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2300) (async) read$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffff80, 0x248c82) (async) 03:49:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x408800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000380)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440)=[{}, {0x80000000, 0x0}], &(0x7f0000000480)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x9, 0x9]}, {r1, r2, 0x2, [0x5, 0x7]}, 0x0, [0xfffffff9]}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x25}, 0x10) syz_open_dev$media(&(0x7f0000000040), 0x1, 0x408800) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000380)=[{}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440), &(0x7f0000000480)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x9, 0x9]}, {r1, r2, 0x2, [0x5, 0x7]}, 0x0, [0xfffffff9]}) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x25}, 0x10) (async) 03:49:20 executing program 1: pkey_free(0xffffffffffffffff) (async) r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2300) read$char_usb(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffff80, 0x248c82) 03:49:20 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x579700) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000540)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xf606, 0x1, 0x40, 0x2, 0x4, 0x6, 0x2, 0x7ff, 0x0, r1}) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x408800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000380)=[{}]}) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000440)=[{}, {0x80000000, 0x0}], &(0x7f0000000480)}) (rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x9, 0x9]}, {r1, r2, 0x2, [0x5, 0x7]}, 0x0, [0xfffffff9]}) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x25}, 0x10) (rerun: 64) 03:49:20 executing program 1: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:20 executing program 4: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000100)=""/170) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602a00, 0x0) mq_unlink(&(0x7f0000000000)='.\x00') ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1213.968511] QAT: failed to copy from user cfg_data. [ 1213.978857] QAT: failed to copy from user cfg_data. 03:49:20 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x579700) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0) syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x579700) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r1, 0x1c, 0x1, @in={0x2, 0x4e23, @multicast1}}}, 0xa0) (async) 03:49:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000540)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xf606, 0x1, 0x40, 0x2, 0x4, 0x6, 0x2, 0x7ff, 0x0, r1}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) gettid() (async) sched_rr_get_interval(r1, &(0x7f0000000540)) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xf606, 0x1, 0x40, 0x2, 0x4, 0x6, 0x2, 0x7ff, 0x0, r1}) (async) 03:49:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}}, 0x4) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) 03:49:21 executing program 4: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000100)=""/170) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602a00, 0x0) mq_unlink(&(0x7f0000000000)='.\x00') ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000100)=""/170) (async) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602a00, 0x0) (async) mq_unlink(&(0x7f0000000000)='.\x00') (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:21 executing program 1: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x81, {{0x6, 0x4, 0x3, 0x1f, 0x18, 0x67, 0x0, 0x5, 0x0, 0x0, @broadcast, @multicast2, {[@noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4d4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x3, 0x7}, {0x8, 0x6, 0x0, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xdd, 0x62, 0xc1, 0x4}, {0x0, 0x2, 0xff, 0x200}, {0x1, 0x8, 0x5b, 0x5}, {0x7ff, 0x20, 0x6, 0x3ff}, {0x3, 0x1f, 0x1f, 0x20}, {0x8, 0xc2, 0x7f, 0x5}]}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x6, 0x4, 0x10000, 0xfffffffd, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x2, 0x6, 0x20, "70f941c1"}, 0x6, 0x4, {0xffffffffffffffff}, 0x8}) close$fd_v4l2_buffer(r1) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xf74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x88d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0xa0, 0xe, {@with_ht={{{}, {0x779b}, @device_b, @device_b, @random="105c0ab370c2", {0xd, 0x2}}, @ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x1}}, 0x6, @default, 0x2800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x40, 0x6}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x1, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2e, 0xa7, 0x10, 0x1}}, [{0xdd, 0x2d, "7f6eea0797f9dbee6c32dfb786971fdcac5b37e9b263725530a8a294fdb8fba4312be3a26a024f3ae10f92ff08"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x156, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x99, 0x9}}, @tim={0x5, 0x82, {0x6d, 0x3b, 0x1, "e3a6e95b17045ea55ab65dc8dc482e047ad079b759b363773aa7561824d70a4ba2983ba68370d159832878910e6e3fa6f78770aafbe04f81d0c320a6ea89b1650110e5af55f6239d9d9d7afafe94e48efeabd5ae4307cf4fbec3e08f2acfaa0ccbcd2b4513f848aa03c4336c8af6e62213ce43f814667b9ff950b5175c91f7"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x1, @val="afa65989a8cba92f699dc1b2396b18af"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb9, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x3, 0x0, {0x100000000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x68, 0x1, 0x3, @device_b, 0x1, @device_a, 0x2, 0x8, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x7f}, {{}, @device_a, 0x400}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x3}]}}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0x4, 0x4, @broadcast, 0x9, 0x4, 0xfffffff8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0x80, [@random={0x40, 0x29, "ccc73101724d508b4ff25f8eb8c4534fc7e2fce8266361689e342c764a89306850020f9139dc32d5a6"}, @peer_mgmt={0x75, 0x8, {0x0, 0x1, @val=0x1, @val, @void}}, @peer_mgmt={0x75, 0x4, {0x1, 0x101, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x434, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @random="2ac6605448c2", {0x8, 0xff}}, 0x7, @random=0x1, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x7, {0x2, 0x26, 0x7, "41db7649"}}, @val={0x25, 0x3, {0x0, 0xa9, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x3, 0xa7, 0x0, 0x3a7, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xd35d, 0x7f}}, @void, @void, @val={0x76, 0x6, {0x32, 0x1, 0x6, 0x40}}, [{0xdd, 0xf5, "6da04c6368d9218c106456935e9c437542393fc21e095985a330e816b036af5b9ae8784e6ef368666da8929cbd297bc28d38b127a3ec41a8cad6a055af133eefaeb6fe70f875b44b127321e987b8d958ecedefd73f81ea0d7ddd7e3f6d71293b26e3cb9b3e16aa7e184f125927dc5bab28b7b45daa3118803a482330bfee91bfff42e521f2ec29cfacbe74fdd2fdd02da4aeb310650b9ca0aab8bf12147403506605a226f177571b569cddc3b6ae56d3c79d8fa23040d74a9fc737664ad6d79a99f75e740bdcb9c53f930c98c39d719a663afab2db8c8e5e9cf5fa25c2823768f4734d790f8fd6b55645d0aed99092d289804936b9"}, {0xdd, 0xbf, "9489c02f9ec63e008952d4c4a69303de04a4172b465069e81c3482484b8f3c82f4ae99830aa82573de933c4e5358e58b5b49216d2535c8521003e388300376ad1508a4f214b45c14f4dbd16d0438fec527b000b6f063ec4ff86ad32699130e86e028f3fe337c58f02b54086d90268649c8f52b3301cb07739803090abf58fad51f261d9f34930a67d3527e14b1f3f472672d2d11c21a365b3deab5bfbca38b4e3f2ff4f7c1a8bc84ae5606395babde8352c34fbf0380a10bcb376d6c9a39f2"}, {0xdd, 0xa, "b084c1f3791cde3e29d0"}, {0xdd, 0xc6, "fff88900db5856687021b2988e1e536159bbd735a56acd58a4115a5ead3843d50ad022167cc8ee30f919b168ec84338ee15bed1837671a72b18f8fe0376dc71c62fe574ad432d3ec80b7047b2ced5cea4a48eefb9507e4bc7dc42d35c4080d53540146942dbba170cef1f58b98e78d5d6bed9a8cd3a56c2672a4f5d155a68ccc53c1be113d4013d9e1228781f12492b153eaf468975a84305aef44cd3cffbb9f1feb37bc519a76f29b2a6b172777e9ac297ab10cdb69b126a15b105277fe27be677eb2c2dbc8"}, {0xdd, 0xb4, "9f85792201f39bbe490783dc24000ae4113b5bae3470ee9dc261197cb09b01a9719e2e46bb46b85b61d002bd312dbbc7ef97d2ab8344b70a8b60add8611d9ea1d4929bd3029528c5481cb9bfcaea1568b307d38b7b48220e1830d508a33bfbfd52c56ac3b8d4e37fc28f352bf1cc3f96ffbbd75a63dc4ee47d39b1cee6bded3a4e1f3111784512bc2935be95aa0a6e867715788708a62129dd5487bf32797f23b7bfe01050966cef49fb6b56b0f20a65413e6e9a"}, {0xdd, 0x93, "b4b0be496664373eaff2ed2b8a127f1860dc81eeb0037f136233f64c28842871b6f70220afe7c36d4d8e728d19cb3c3d93ce84bac7f9c0e9d02e66b96b7f5d7508739b1f3111310337a53f99827b75d5d46f22a4d78f25c44a7470f37d5bffb8c36f49be733f1150024fe561f5c142f7cec6b55f4cf8088c2dfe7a0cbe6d418f81518c04048838a053caf8a292047d1ad730a9"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "a74dc7f6088ff2752d7bd90045525368c68f2e0797623d0d2797b15fbfaa5458ffc66e97583643124f38ab92d80bce6c28729455189c382ebd73c15fdacb7877f0aeb902450a45291117eb137b90380fa497da"}]}]}, 0xf74}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000540)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xf606, 0x1, 0x40, 0x2, 0x4, 0x6, 0x2, 0x7ff, 0x0, r1}) 03:49:21 executing program 1: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x81, {{0x6, 0x4, 0x3, 0x1f, 0x18, 0x67, 0x0, 0x5, 0x0, 0x0, @broadcast, @multicast2, {[@noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4d4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x3, 0x7}, {0x8, 0x6, 0x0, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xdd, 0x62, 0xc1, 0x4}, {0x0, 0x2, 0xff, 0x200}, {0x1, 0x8, 0x5b, 0x5}, {0x7ff, 0x20, 0x6, 0x3ff}, {0x3, 0x1f, 0x1f, 0x20}, {0x8, 0xc2, 0x7f, 0x5}]}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x6, 0x4, 0x10000, 0xfffffffd, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x2, 0x6, 0x20, "70f941c1"}, 0x6, 0x4, {0xffffffffffffffff}, 0x8}) close$fd_v4l2_buffer(r1) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xf74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x88d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0xa0, 0xe, {@with_ht={{{}, {0x779b}, @device_b, @device_b, @random="105c0ab370c2", {0xd, 0x2}}, @ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x1}}, 0x6, @default, 0x2800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x40, 0x6}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x1, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2e, 0xa7, 0x10, 0x1}}, [{0xdd, 0x2d, "7f6eea0797f9dbee6c32dfb786971fdcac5b37e9b263725530a8a294fdb8fba4312be3a26a024f3ae10f92ff08"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x156, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x99, 0x9}}, @tim={0x5, 0x82, {0x6d, 0x3b, 0x1, "e3a6e95b17045ea55ab65dc8dc482e047ad079b759b363773aa7561824d70a4ba2983ba68370d159832878910e6e3fa6f78770aafbe04f81d0c320a6ea89b1650110e5af55f6239d9d9d7afafe94e48efeabd5ae4307cf4fbec3e08f2acfaa0ccbcd2b4513f848aa03c4336c8af6e62213ce43f814667b9ff950b5175c91f7"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x1, @val="afa65989a8cba92f699dc1b2396b18af"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb9, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x3, 0x0, {0x100000000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x68, 0x1, 0x3, @device_b, 0x1, @device_a, 0x2, 0x8, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x7f}, {{}, @device_a, 0x400}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x3}]}}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0x4, 0x4, @broadcast, 0x9, 0x4, 0xfffffff8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0x80, [@random={0x40, 0x29, "ccc73101724d508b4ff25f8eb8c4534fc7e2fce8266361689e342c764a89306850020f9139dc32d5a6"}, @peer_mgmt={0x75, 0x8, {0x0, 0x1, @val=0x1, @val, @void}}, @peer_mgmt={0x75, 0x4, {0x1, 0x101, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x434, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @random="2ac6605448c2", {0x8, 0xff}}, 0x7, @random=0x1, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x7, {0x2, 0x26, 0x7, "41db7649"}}, @val={0x25, 0x3, {0x0, 0xa9, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x3, 0xa7, 0x0, 0x3a7, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xd35d, 0x7f}}, @void, @void, @val={0x76, 0x6, {0x32, 0x1, 0x6, 0x40}}, [{0xdd, 0xf5, "6da04c6368d9218c106456935e9c437542393fc21e095985a330e816b036af5b9ae8784e6ef368666da8929cbd297bc28d38b127a3ec41a8cad6a055af133eefaeb6fe70f875b44b127321e987b8d958ecedefd73f81ea0d7ddd7e3f6d71293b26e3cb9b3e16aa7e184f125927dc5bab28b7b45daa3118803a482330bfee91bfff42e521f2ec29cfacbe74fdd2fdd02da4aeb310650b9ca0aab8bf12147403506605a226f177571b569cddc3b6ae56d3c79d8fa23040d74a9fc737664ad6d79a99f75e740bdcb9c53f930c98c39d719a663afab2db8c8e5e9cf5fa25c2823768f4734d790f8fd6b55645d0aed99092d289804936b9"}, {0xdd, 0xbf, "9489c02f9ec63e008952d4c4a69303de04a4172b465069e81c3482484b8f3c82f4ae99830aa82573de933c4e5358e58b5b49216d2535c8521003e388300376ad1508a4f214b45c14f4dbd16d0438fec527b000b6f063ec4ff86ad32699130e86e028f3fe337c58f02b54086d90268649c8f52b3301cb07739803090abf58fad51f261d9f34930a67d3527e14b1f3f472672d2d11c21a365b3deab5bfbca38b4e3f2ff4f7c1a8bc84ae5606395babde8352c34fbf0380a10bcb376d6c9a39f2"}, {0xdd, 0xa, "b084c1f3791cde3e29d0"}, {0xdd, 0xc6, "fff88900db5856687021b2988e1e536159bbd735a56acd58a4115a5ead3843d50ad022167cc8ee30f919b168ec84338ee15bed1837671a72b18f8fe0376dc71c62fe574ad432d3ec80b7047b2ced5cea4a48eefb9507e4bc7dc42d35c4080d53540146942dbba170cef1f58b98e78d5d6bed9a8cd3a56c2672a4f5d155a68ccc53c1be113d4013d9e1228781f12492b153eaf468975a84305aef44cd3cffbb9f1feb37bc519a76f29b2a6b172777e9ac297ab10cdb69b126a15b105277fe27be677eb2c2dbc8"}, {0xdd, 0xb4, "9f85792201f39bbe490783dc24000ae4113b5bae3470ee9dc261197cb09b01a9719e2e46bb46b85b61d002bd312dbbc7ef97d2ab8344b70a8b60add8611d9ea1d4929bd3029528c5481cb9bfcaea1568b307d38b7b48220e1830d508a33bfbfd52c56ac3b8d4e37fc28f352bf1cc3f96ffbbd75a63dc4ee47d39b1cee6bded3a4e1f3111784512bc2935be95aa0a6e867715788708a62129dd5487bf32797f23b7bfe01050966cef49fb6b56b0f20a65413e6e9a"}, {0xdd, 0x93, "b4b0be496664373eaff2ed2b8a127f1860dc81eeb0037f136233f64c28842871b6f70220afe7c36d4d8e728d19cb3c3d93ce84bac7f9c0e9d02e66b96b7f5d7508739b1f3111310337a53f99827b75d5d46f22a4d78f25c44a7470f37d5bffb8c36f49be733f1150024fe561f5c142f7cec6b55f4cf8088c2dfe7a0cbe6d418f81518c04048838a053caf8a292047d1ad730a9"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "a74dc7f6088ff2752d7bd90045525368c68f2e0797623d0d2797b15fbfaa5458ffc66e97583643124f38ab92d80bce6c28729455189c382ebd73c15fdacb7877f0aeb902450a45291117eb137b90380fa497da"}]}]}, 0xf74}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x100000001, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 4: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000100)=""/170) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602a00, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602a00, 0x0) mq_unlink(&(0x7f0000000000)='.\x00') ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x6, 0x4, 0x10000, 0xfffffffd, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x2, 0x6, 0x20, "70f941c1"}, 0x6, 0x4, {0xffffffffffffffff}, 0x8}) close$fd_v4l2_buffer(r1) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xf74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x88d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0xa0, 0xe, {@with_ht={{{}, {0x779b}, @device_b, @device_b, @random="105c0ab370c2", {0xd, 0x2}}, @ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x1}}, 0x6, @default, 0x2800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x40, 0x6}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x1, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2e, 0xa7, 0x10, 0x1}}, [{0xdd, 0x2d, "7f6eea0797f9dbee6c32dfb786971fdcac5b37e9b263725530a8a294fdb8fba4312be3a26a024f3ae10f92ff08"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x156, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x99, 0x9}}, @tim={0x5, 0x82, {0x6d, 0x3b, 0x1, "e3a6e95b17045ea55ab65dc8dc482e047ad079b759b363773aa7561824d70a4ba2983ba68370d159832878910e6e3fa6f78770aafbe04f81d0c320a6ea89b1650110e5af55f6239d9d9d7afafe94e48efeabd5ae4307cf4fbec3e08f2acfaa0ccbcd2b4513f848aa03c4336c8af6e62213ce43f814667b9ff950b5175c91f7"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x1, @val="afa65989a8cba92f699dc1b2396b18af"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb9, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x3, 0x0, {0x100000000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x68, 0x1, 0x3, @device_b, 0x1, @device_a, 0x2, 0x8, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x7f}, {{}, @device_a, 0x400}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x3}]}}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0x4, 0x4, @broadcast, 0x9, 0x4, 0xfffffff8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0x80, [@random={0x40, 0x29, "ccc73101724d508b4ff25f8eb8c4534fc7e2fce8266361689e342c764a89306850020f9139dc32d5a6"}, @peer_mgmt={0x75, 0x8, {0x0, 0x1, @val=0x1, @val, @void}}, @peer_mgmt={0x75, 0x4, {0x1, 0x101, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x434, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @random="2ac6605448c2", {0x8, 0xff}}, 0x7, @random=0x1, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x7, {0x2, 0x26, 0x7, "41db7649"}}, @val={0x25, 0x3, {0x0, 0xa9, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x3, 0xa7, 0x0, 0x3a7, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xd35d, 0x7f}}, @void, @void, @val={0x76, 0x6, {0x32, 0x1, 0x6, 0x40}}, [{0xdd, 0xf5, "6da04c6368d9218c106456935e9c437542393fc21e095985a330e816b036af5b9ae8784e6ef368666da8929cbd297bc28d38b127a3ec41a8cad6a055af133eefaeb6fe70f875b44b127321e987b8d958ecedefd73f81ea0d7ddd7e3f6d71293b26e3cb9b3e16aa7e184f125927dc5bab28b7b45daa3118803a482330bfee91bfff42e521f2ec29cfacbe74fdd2fdd02da4aeb310650b9ca0aab8bf12147403506605a226f177571b569cddc3b6ae56d3c79d8fa23040d74a9fc737664ad6d79a99f75e740bdcb9c53f930c98c39d719a663afab2db8c8e5e9cf5fa25c2823768f4734d790f8fd6b55645d0aed99092d289804936b9"}, {0xdd, 0xbf, "9489c02f9ec63e008952d4c4a69303de04a4172b465069e81c3482484b8f3c82f4ae99830aa82573de933c4e5358e58b5b49216d2535c8521003e388300376ad1508a4f214b45c14f4dbd16d0438fec527b000b6f063ec4ff86ad32699130e86e028f3fe337c58f02b54086d90268649c8f52b3301cb07739803090abf58fad51f261d9f34930a67d3527e14b1f3f472672d2d11c21a365b3deab5bfbca38b4e3f2ff4f7c1a8bc84ae5606395babde8352c34fbf0380a10bcb376d6c9a39f2"}, {0xdd, 0xa, "b084c1f3791cde3e29d0"}, {0xdd, 0xc6, "fff88900db5856687021b2988e1e536159bbd735a56acd58a4115a5ead3843d50ad022167cc8ee30f919b168ec84338ee15bed1837671a72b18f8fe0376dc71c62fe574ad432d3ec80b7047b2ced5cea4a48eefb9507e4bc7dc42d35c4080d53540146942dbba170cef1f58b98e78d5d6bed9a8cd3a56c2672a4f5d155a68ccc53c1be113d4013d9e1228781f12492b153eaf468975a84305aef44cd3cffbb9f1feb37bc519a76f29b2a6b172777e9ac297ab10cdb69b126a15b105277fe27be677eb2c2dbc8"}, {0xdd, 0xb4, "9f85792201f39bbe490783dc24000ae4113b5bae3470ee9dc261197cb09b01a9719e2e46bb46b85b61d002bd312dbbc7ef97d2ab8344b70a8b60add8611d9ea1d4929bd3029528c5481cb9bfcaea1568b307d38b7b48220e1830d508a33bfbfd52c56ac3b8d4e37fc28f352bf1cc3f96ffbbd75a63dc4ee47d39b1cee6bded3a4e1f3111784512bc2935be95aa0a6e867715788708a62129dd5487bf32797f23b7bfe01050966cef49fb6b56b0f20a65413e6e9a"}, {0xdd, 0x93, "b4b0be496664373eaff2ed2b8a127f1860dc81eeb0037f136233f64c28842871b6f70220afe7c36d4d8e728d19cb3c3d93ce84bac7f9c0e9d02e66b96b7f5d7508739b1f3111310337a53f99827b75d5d46f22a4d78f25c44a7470f37d5bffb8c36f49be733f1150024fe561f5c142f7cec6b55f4cf8088c2dfe7a0cbe6d418f81518c04048838a053caf8a292047d1ad730a9"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "a74dc7f6088ff2752d7bd90045525368c68f2e0797623d0d2797b15fbfaa5458ffc66e97583643124f38ab92d80bce6c28729455189c382ebd73c15fdacb7877f0aeb902450a45291117eb137b90380fa497da"}]}]}, 0xf74}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x6, 0x4, 0x10000, 0xfffffffd, {0x0, 0xea60}, {0x1, 0x8, 0x40, 0x2, 0x6, 0x20, "70f941c1"}, 0x6, 0x4, {}, 0x8}) (async) close$fd_v4l2_buffer(r1) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xf74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x88d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0xa0, 0xe, {@with_ht={{{}, {0x779b}, @device_b, @device_b, @random="105c0ab370c2", {0xd, 0x2}}, @ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x1}}, 0x6, @default, 0x2800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x40, 0x6}}, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x1, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2e, 0xa7, 0x10, 0x1}}, [{0xdd, 0x2d, "7f6eea0797f9dbee6c32dfb786971fdcac5b37e9b263725530a8a294fdb8fba4312be3a26a024f3ae10f92ff08"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x156, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x99, 0x9}}, @tim={0x5, 0x82, {0x6d, 0x3b, 0x1, "e3a6e95b17045ea55ab65dc8dc482e047ad079b759b363773aa7561824d70a4ba2983ba68370d159832878910e6e3fa6f78770aafbe04f81d0c320a6ea89b1650110e5af55f6239d9d9d7afafe94e48efeabd5ae4307cf4fbec3e08f2acfaa0ccbcd2b4513f848aa03c4336c8af6e62213ce43f814667b9ff950b5175c91f7"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x6, @void, @val=0x1, @val="afa65989a8cba92f699dc1b2396b18af"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb9, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x3, 0x0, {0x100000000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x68, 0x1, 0x3, @device_b, 0x1, @device_a, 0x2, 0x8, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x7f}, {{}, @device_a, 0x400}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x3}]}}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0x4, 0x4, @broadcast, 0x9, 0x4, 0xfffffff8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0x80, [@random={0x40, 0x29, "ccc73101724d508b4ff25f8eb8c4534fc7e2fce8266361689e342c764a89306850020f9139dc32d5a6"}, @peer_mgmt={0x75, 0x8, {0x0, 0x1, @val=0x1, @val, @void}}, @peer_mgmt={0x75, 0x4, {0x1, 0x101, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_HEAD={0x434, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @random="2ac6605448c2", {0x8, 0xff}}, 0x7, @random=0x1, 0x0, @void, @void, @void, @void, @void, @val={0x5, 0x7, {0x2, 0x26, 0x7, "41db7649"}}, @val={0x25, 0x3, {0x0, 0xa9, 0x40}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x3, 0xa7, 0x0, 0x3a7, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xd35d, 0x7f}}, @void, @void, @val={0x76, 0x6, {0x32, 0x1, 0x6, 0x40}}, [{0xdd, 0xf5, "6da04c6368d9218c106456935e9c437542393fc21e095985a330e816b036af5b9ae8784e6ef368666da8929cbd297bc28d38b127a3ec41a8cad6a055af133eefaeb6fe70f875b44b127321e987b8d958ecedefd73f81ea0d7ddd7e3f6d71293b26e3cb9b3e16aa7e184f125927dc5bab28b7b45daa3118803a482330bfee91bfff42e521f2ec29cfacbe74fdd2fdd02da4aeb310650b9ca0aab8bf12147403506605a226f177571b569cddc3b6ae56d3c79d8fa23040d74a9fc737664ad6d79a99f75e740bdcb9c53f930c98c39d719a663afab2db8c8e5e9cf5fa25c2823768f4734d790f8fd6b55645d0aed99092d289804936b9"}, {0xdd, 0xbf, "9489c02f9ec63e008952d4c4a69303de04a4172b465069e81c3482484b8f3c82f4ae99830aa82573de933c4e5358e58b5b49216d2535c8521003e388300376ad1508a4f214b45c14f4dbd16d0438fec527b000b6f063ec4ff86ad32699130e86e028f3fe337c58f02b54086d90268649c8f52b3301cb07739803090abf58fad51f261d9f34930a67d3527e14b1f3f472672d2d11c21a365b3deab5bfbca38b4e3f2ff4f7c1a8bc84ae5606395babde8352c34fbf0380a10bcb376d6c9a39f2"}, {0xdd, 0xa, "b084c1f3791cde3e29d0"}, {0xdd, 0xc6, "fff88900db5856687021b2988e1e536159bbd735a56acd58a4115a5ead3843d50ad022167cc8ee30f919b168ec84338ee15bed1837671a72b18f8fe0376dc71c62fe574ad432d3ec80b7047b2ced5cea4a48eefb9507e4bc7dc42d35c4080d53540146942dbba170cef1f58b98e78d5d6bed9a8cd3a56c2672a4f5d155a68ccc53c1be113d4013d9e1228781f12492b153eaf468975a84305aef44cd3cffbb9f1feb37bc519a76f29b2a6b172777e9ac297ab10cdb69b126a15b105277fe27be677eb2c2dbc8"}, {0xdd, 0xb4, "9f85792201f39bbe490783dc24000ae4113b5bae3470ee9dc261197cb09b01a9719e2e46bb46b85b61d002bd312dbbc7ef97d2ab8344b70a8b60add8611d9ea1d4929bd3029528c5481cb9bfcaea1568b307d38b7b48220e1830d508a33bfbfd52c56ac3b8d4e37fc28f352bf1cc3f96ffbbd75a63dc4ee47d39b1cee6bded3a4e1f3111784512bc2935be95aa0a6e867715788708a62129dd5487bf32797f23b7bfe01050966cef49fb6b56b0f20a65413e6e9a"}, {0xdd, 0x93, "b4b0be496664373eaff2ed2b8a127f1860dc81eeb0037f136233f64c28842871b6f70220afe7c36d4d8e728d19cb3c3d93ce84bac7f9c0e9d02e66b96b7f5d7508739b1f3111310337a53f99827b75d5d46f22a4d78f25c44a7470f37d5bffb8c36f49be733f1150024fe561f5c142f7cec6b55f4cf8088c2dfe7a0cbe6d418f81518c04048838a053caf8a292047d1ad730a9"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "a74dc7f6088ff2752d7bd90045525368c68f2e0797623d0d2797b15fbfaa5458ffc66e97583643124f38ab92d80bce6c28729455189c382ebd73c15fdacb7877f0aeb902450a45291117eb137b90380fa497da"}]}]}, 0xf74}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"0779793f439ca55f2f07af8ce2fef8c0f66c7526502dfbc43322d26d17d8e6580b123e8533a7e89f05bfc6e79b40590aa14f64c30b012bbf34f51e98941dfd23"}}}}}}}}}, 0x1}) 03:49:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x81, {{0x6, 0x4, 0x3, 0x1f, 0x18, 0x67, 0x0, 0x5, 0x0, 0x0, @broadcast, @multicast2, {[@noop, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4d4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x4, 0x3, 0x7}, {0x8, 0x6, 0x0, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xdd, 0x62, 0xc1, 0x4}, {0x0, 0x2, 0xff, 0x200}, {0x1, 0x8, 0x5b, 0x5}, {0x7ff, 0x20, 0x6, 0x3ff}, {0x3, 0x1f, 0x1f, 0x20}, {0x8, 0xc2, 0x7f, 0x5}]}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:49:21 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x7}) 03:49:21 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x100000001, 0x0) (async) syz_open_dev$video(&(0x7f0000000800), 0x100000001, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"0779793f439ca55f2f07af8ce2fef8c0f66c7526502dfbc43322d26d17d8e6580b123e8533a7e89f05bfc6e79b40590aa14f64c30b012bbf34f51e98941dfd23"}}}}}}}}}, 0x1}) (rerun: 32) 03:49:21 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:21 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x100000001, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0xf77d, 0x0, 0x1f, 0x1}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xff, 0x0, 0x40, 0x100, 0x1, 0x8, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xb}, 0x48) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, &(0x7f00000000c0)) 03:49:21 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x7}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x7}) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000}, {&(0x7f0000000000)=@adf_str={@normal='NumberCyInstances\x00', {"0779793f439ca55f2f07af8ce2fef8c0f66c7526502dfbc43322d26d17d8e6580b123e8533a7e89f05bfc6e79b40590aa14f64c30b012bbf34f51e98941dfd23"}}}}}}}}}, 0x1}) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0xf77d, 0x0, 0x1f, 0x1}, 0x8) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xff, 0x0, 0x40, 0x100, 0x1, 0x8, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xb}, 0x48) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1214.356455] QAT: failed to copy from user cfg_data. 03:49:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xde) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 03:49:21 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) (async, rerun: 64) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xde) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xde) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) 03:49:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000002c0)={{0x80000000, r3, 0x0, [0x0, 0x2]}, {r4, r5, 0x1, [0x266, 0x1]}, 0x10000000, [0x9, 0x6]}) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r6, r7, 0xa}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, &(0x7f00000000c0)) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, &(0x7f00000000c0)) (async) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0xf77d, 0x0, 0x1f, 0x1}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xff, 0x0, 0x40, 0x100, 0x1, 0x8, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xb}, 0x48) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000002c0)={{0x80000000, r3, 0x0, [0x0, 0x2]}, {r4, r5, 0x1, [0x266, 0x1]}, 0x10000000, [0x9, 0x6]}) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r6, r7, 0xa}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 03:49:21 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x7}) 03:49:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xde) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) [ 1214.476026] QAT: failed to copy from user cfg_data. 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, &(0x7f00000000c0)) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60044}, 0x4008090) 03:49:21 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000480)={0x3, 0x0, 0x4, 0x400, 0x0, {0x77359400}, {0x5, 0x8, 0x2, 0xe5, 0x2, 0x9, "3309eb67"}, 0xb5, 0x4, {}, 0x101, 0x0, r1}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file0\x00') openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xb) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='\x00') 03:49:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x5, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000002c0)={{0x80000000, r3, 0x0, [0x0, 0x2]}, {r4, r5, 0x1, [0x266, 0x1]}, 0x10000000, [0x9, 0x6]}) (async, rerun: 64) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x10) (rerun: 64) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r6, r7, 0xa}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(r2, &(0x7f00000006c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) 03:49:21 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8041) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60044}, 0x4008090) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getdents64(r1, &(0x7f00000000c0)=""/95, 0x5f) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000180)=""/60, 0x3c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) [ 1214.597659] QAT: failed to copy from user cfg_data. 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000480)={0x3, 0x0, 0x4, 0x400, 0x0, {0x77359400}, {0x5, 0x8, 0x2, 0xe5, 0x2, 0x9, "3309eb67"}, 0xb5, 0x4, {}, 0x101, 0x0, r1}) (async) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file0\x00') openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async, rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xb) (async, rerun: 64) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='\x00') (rerun: 32) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60044}, 0x4008090) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) [ 1214.622406] QAT: failed to copy from user cfg_data. 03:49:21 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:21 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@format={'Cy', '1', 'RingAsymTx\x00'}, {0x3}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '5', 'RingAsymRx\x00'}, {0x6}}}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x1}) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) getdents64(r1, &(0x7f00000000c0)=""/95, 0x5f) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000180)=""/60, 0x3c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) (rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000480)={0x3, 0x0, 0x4, 0x400, 0x0, {0x77359400}, {0x5, 0x8, 0x2, 0xe5, 0x2, 0x9, "3309eb67"}, 0xb5, 0x4, {}, 0x101, 0x0, r1}) (async) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file0\x00') openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async, rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xb) (async, rerun: 64) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) (async) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='\x00') 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getdents64(r1, &(0x7f00000000c0)=""/95, 0x5f) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, &(0x7f0000000180)=""/60, 0x3c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) [ 1214.725800] QAT: failed to copy from user cfg_data. 03:49:21 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async, rerun: 64) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@format={'Cy', '1', 'RingAsymTx\x00'}, {0x3}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '5', 'RingAsymRx\x00'}, {0x6}}}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x1}) (rerun: 64) 03:49:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x1, 0x4, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x39, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xabc00000}, {@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@private=0xa010102, 0x2}, {@local, 0x10000}]}, @timestamp={0x44, 0x14, 0x89, 0x0, 0x8, [0x8, 0x5, 0x8, 0x40]}, @timestamp={0x44, 0xc, 0x46, 0x0, 0x6, [0x1000, 0x400000]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x6, [0x6, 0x101, 0x0, 0x3]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3ff0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, '~'}]}, @rr={0x7, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000730000000000000000000500030006000000040004000800060030cb4b17aa3362e6e9c887cccf4eb0be63a2b7ab0ac416c675a7532533e0435ee08afbb109049ffb9e6112b46e83e2a13e3741aaf46b7037d36331e5ba01ac44322f16e2a82613eb0055b210a8e64648e99b", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8080) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x100) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) [ 1214.828479] QAT: failed to copy from user cfg_data. 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x814, 0x101000) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3ff, 0x230342) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x2000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x90, 0x46, 0x6, 0x80, "e92f6f40"}, 0x3f, 0x4, {}, 0x86}) [ 1214.850350] QAT: failed to copy from user cfg_data. 03:49:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) read$char_usb(r0, 0x0, 0x0) 03:49:21 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) 03:49:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x1, 0x4, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x39, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xabc00000}, {@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@private=0xa010102, 0x2}, {@local, 0x10000}]}, @timestamp={0x44, 0x14, 0x89, 0x0, 0x8, [0x8, 0x5, 0x8, 0x40]}, @timestamp={0x44, 0xc, 0x46, 0x0, 0x6, [0x1000, 0x400000]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x6, [0x6, 0x101, 0x0, 0x3]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3ff0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, '~'}]}, @rr={0x7, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000730000000000000000000500030006000000040004000800060030cb4b17aa3362e6e9c887cccf4eb0be63a2b7ab0ac416c675a7532533e0435ee08afbb109049ffb9e6112b46e83e2a13e3741aaf46b7037d36331e5ba01ac44322f16e2a82613eb0055b210a8e64648e99b", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8080) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x100) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x1, 0x4, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x39, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xabc00000}, {@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@private=0xa010102, 0x2}, {@local, 0x10000}]}, @timestamp={0x44, 0x14, 0x89, 0x0, 0x8, [0x8, 0x5, 0x8, 0x40]}, @timestamp={0x44, 0xc, 0x46, 0x0, 0x6, [0x1000, 0x400000]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x6, [0x6, 0x101, 0x0, 0x3]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3ff0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, '~'}]}, @rr={0x7, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000730000000000000000000500030006000000040004000800060030cb4b17aa3362e6e9c887cccf4eb0be63a2b7ab0ac416c675a7532533e0435ee08afbb109049ffb9e6112b46e83e2a13e3741aaf46b7037d36331e5ba01ac44322f16e2a82613eb0055b210a8e64648e99b", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8080) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x100) (async) 03:49:21 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) [ 1214.877882] QAT: failed to copy from user cfg_data. [ 1214.896155] QAT: failed to copy from user cfg_data. 03:49:21 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x814, 0x101000) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3ff, 0x230342) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x2000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x90, 0x46, 0x6, 0x80, "e92f6f40"}, 0x3f, 0x4, {}, 0x86}) [ 1214.918743] QAT: failed to copy from user cfg_data. [ 1214.926333] QAT: failed to copy from user cfg_data. [ 1214.941882] QAT: failed to copy from user cfg_data. [ 1214.950831] QAT: failed to copy from user cfg_data. [ 1214.957937] QAT: failed to copy from user cfg_data. [ 1214.969378] QAT: failed to copy from user cfg_data. [ 1214.975385] QAT: failed to copy from user cfg_data. [ 1214.981309] QAT: failed to copy from user cfg_data. [ 1214.987633] QAT: failed to copy from user cfg_data. [ 1214.994889] QAT: failed to copy from user cfg_data. [ 1215.003151] QAT: failed to copy from user cfg_data. [ 1215.008781] QAT: failed to copy from user cfg_data. [ 1215.014130] QAT: failed to copy from user cfg_data. [ 1215.019152] QAT: failed to copy from user cfg_data. [ 1215.024458] QAT: failed to copy from user cfg_data. [ 1215.029497] QAT: failed to copy from user cfg_data. [ 1215.034605] QAT: failed to copy from user cfg_data. [ 1215.039640] QAT: failed to copy from user cfg_data. [ 1215.044844] QAT: failed to copy from user cfg_data. [ 1215.049883] QAT: failed to copy from user cfg_data. [ 1215.054971] QAT: failed to copy from user cfg_data. [ 1215.059998] QAT: failed to copy from user cfg_data. [ 1215.065113] QAT: failed to copy from user cfg_data. [ 1215.070142] QAT: failed to copy from user cfg_data. [ 1215.075247] QAT: failed to copy from user cfg_data. [ 1215.080275] QAT: failed to copy from user cfg_data. [ 1215.085470] QAT: failed to copy from user cfg_data. [ 1215.090500] QAT: failed to copy from user cfg_data. [ 1215.095631] QAT: failed to copy from user cfg_data. [ 1215.100657] QAT: failed to copy from user cfg_data. [ 1215.105769] QAT: failed to copy from user cfg_data. [ 1215.110791] QAT: failed to copy from user cfg_data. [ 1215.115876] QAT: failed to copy from user cfg_data. [ 1215.121028] QAT: failed to copy from user cfg_data. [ 1215.126122] QAT: failed to copy from user cfg_data. [ 1215.131168] QAT: failed to copy from user cfg_data. [ 1215.136274] QAT: failed to copy from user cfg_data. [ 1215.141318] QAT: failed to copy from user cfg_data. [ 1215.146418] QAT: failed to copy from user cfg_data. [ 1215.151448] QAT: failed to copy from user cfg_data. [ 1215.156546] QAT: failed to copy from user cfg_data. [ 1215.161574] QAT: failed to copy from user cfg_data. [ 1215.166660] QAT: failed to copy from user cfg_data. [ 1215.171784] QAT: failed to copy from user cfg_data. [ 1215.176925] QAT: failed to copy from user cfg_data. [ 1215.181957] QAT: failed to copy from user cfg_data. [ 1215.187087] QAT: failed to copy from user cfg_data. [ 1215.192270] QAT: failed to copy from user cfg_data. [ 1215.197306] QAT: failed to copy from user cfg_data. [ 1215.202420] QAT: failed to copy from user cfg_data. [ 1215.207450] QAT: failed to copy from user cfg_data. [ 1215.212569] QAT: failed to copy from user cfg_data. 03:49:22 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@format={'Cy', '1', 'RingAsymTx\x00'}, {0x3}, {&(0x7f0000000000)=@adf_hex={@format={'Dc', '5', 'RingAsymRx\x00'}, {0x6}}}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x1}) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) read$char_usb(r0, 0x0, 0x0) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) 03:49:22 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x814, 0x101000) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3ff, 0x230342) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x2000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x90, 0x46, 0x6, 0x80, "e92f6f40"}, 0x3f, 0x4, {}, 0x86}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x2000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x90, 0x46, 0x6, 0x80, "e92f6f40"}, 0x3f, 0x4, {}, 0x86}) 03:49:22 executing program 5: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x10000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = socket(0x22, 0x80000, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000300)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/130, 0x82, 0x1, &(0x7f0000000240)=""/134, 0x86}, &(0x7f0000000180)=0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e24, 0xffff, @loopback, 0x9}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x6, 0x2, @remote, 0x3}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffff8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33a1}], 0xb0) 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200102, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x1, 0x4, {{0x2c, 0x4, 0x0, 0x5, 0xb0, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x39, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xabc00000}, {@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@private=0xa010102, 0x2}, {@local, 0x10000}]}, @timestamp={0x44, 0x14, 0x89, 0x0, 0x8, [0x8, 0x5, 0x8, 0x40]}, @timestamp={0x44, 0xc, 0x46, 0x0, 0x6, [0x1000, 0x400000]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x6, [0x6, 0x101, 0x0, 0x3]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3ff0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, '~'}]}, @rr={0x7, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3ff0, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x6, 0x3, '~'}]}, @rr={0x7, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000730000000000000000000500030006000000040004000800060030cb4b17aa3362e6e9c887cccf4eb0be63a2b7ab0ac416c675a7532533e0435ee08afbb109049ffb9e6112b46e83e2a13e3741aaf46b7037d36331e5ba01ac44322f16e2a82613eb0055b210a8e64648e99b", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8080) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002b80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000730000000000000000000500030006000000040004000800060030cb4b17aa3362e6e9c887cccf4eb0be63a2b7ab0ac416c675a7532533e0435ee08afbb109049ffb9e6112b46e83e2a13e3741aaf46b7037d36331e5ba01ac44322f16e2a82613eb0055b210a8e64648e99b", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040004000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x40400c0}, 0x8080) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x100) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, 0x0, 0x100) [ 1215.217601] QAT: failed to copy from user cfg_data. [ 1215.222699] QAT: failed to copy from user cfg_data. [ 1215.227751] QAT: failed to copy from user cfg_data. [ 1215.232886] QAT: failed to copy from user cfg_data. [ 1215.237930] QAT: failed to copy from user cfg_data. [ 1215.243017] QAT: failed to copy from user cfg_data. [ 1215.248175] QAT: failed to copy from user cfg_data. [ 1215.253288] QAT: failed to copy from user cfg_data. [ 1215.258320] QAT: failed to copy from user cfg_data. 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x303082) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3f, 0xc, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x2, 0x2, 0x4, 0x6, 0x4, 0x1f, "7a6b7ec0"}, 0x6a5a0000, 0x4, {}, 0x80000000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa36d}, 0x8) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{&(0x7f00000004c0)={'GENERAL\x00', {&(0x7f0000000380)=@adf_dec={@format={'Dc', '2', 'RingAsymTx\x00'}, {0x800}, {&(0x7f00000002c0)=@adf_str={@format={'Cy', '3', 'RingRx\x00'}, {"42cafde93dabdd36872f1ac5cb3659e94f7a6daf4a0544120687c8fae4cc91c9c50713e2fda8d72e5ccf2b307f202d88a2d8fd04bdcd69abecc64265153b742b"}}}}}, {&(0x7f0000000440)={'Accelerator1\x00'}}}}, 0x7}) pipe2$watch_queue(&(0x7f0000000240), 0x80) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) read$char_usb(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="325a4458eb3b5411de8240ee9068b416", 0x10) 03:49:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) 03:49:22 executing program 5: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x10000) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = socket(0x22, 0x80000, 0x8) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000300)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/130, 0x82, 0x1, &(0x7f0000000240)=""/134, 0x86}, &(0x7f0000000180)=0x40) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e24, 0xffff, @loopback, 0x9}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x6, 0x2, @remote, 0x3}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffff8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33a1}], 0xb0) 03:49:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x401, 0x6, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x2, 0xc, 0xbe, 0x3, 0x1, 0x0, "015cc65c"}, 0x2, 0x4, {}, 0x20}) [ 1215.335147] QAT: failed to copy from user cfg_data. [ 1215.349620] QAT: failed to copy from user cfg_data. 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x303082) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3f, 0xc, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x2, 0x2, 0x4, 0x6, 0x4, 0x1f, "7a6b7ec0"}, 0x6a5a0000, 0x4, {}, 0x80000000}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa36d}, 0x8) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) (async) read$char_usb(r0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="325a4458eb3b5411de8240ee9068b416", 0x10) 03:49:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) (async) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{&(0x7f00000004c0)={'GENERAL\x00', {&(0x7f0000000380)=@adf_dec={@format={'Dc', '2', 'RingAsymTx\x00'}, {0x800}, {&(0x7f00000002c0)=@adf_str={@format={'Cy', '3', 'RingRx\x00'}, {"42cafde93dabdd36872f1ac5cb3659e94f7a6daf4a0544120687c8fae4cc91c9c50713e2fda8d72e5ccf2b307f202d88a2d8fd04bdcd69abecc64265153b742b"}}}}}, {&(0x7f0000000440)={'Accelerator1\x00'}}}}, 0x7}) (async) pipe2$watch_queue(&(0x7f0000000240), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) (async) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) 03:49:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) [ 1215.417752] QAT: failed to copy from user cfg_data. 03:49:22 executing program 5: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}}, 0x10000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = socket(0x22, 0x80000, 0x8) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000300)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/130, 0x82, 0x1, &(0x7f0000000240)=""/134, 0x86}, &(0x7f0000000180)=0x40) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e24, 0xffff, @loopback, 0x9}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x6, 0x2, @remote, 0x3}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffff8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33a1}], 0xb0) 03:49:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{&(0x7f00000004c0)={'GENERAL\x00', {&(0x7f0000000380)=@adf_dec={@format={'Dc', '2', 'RingAsymTx\x00'}, {0x800}, {&(0x7f00000002c0)=@adf_str={@format={'Cy', '3', 'RingRx\x00'}, {"42cafde93dabdd36872f1ac5cb3659e94f7a6daf4a0544120687c8fae4cc91c9c50713e2fda8d72e5ccf2b307f202d88a2d8fd04bdcd69abecc64265153b742b"}}}}}, {&(0x7f0000000440)={'Accelerator1\x00'}}}}, 0x7}) pipe2$watch_queue(&(0x7f0000000240), 0x80) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) (async) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{&(0x7f00000004c0)={'GENERAL\x00', {&(0x7f0000000380)=@adf_dec={@format={'Dc', '2', 'RingAsymTx\x00'}, {0x800}, {&(0x7f00000002c0)=@adf_str={@format={'Cy', '3', 'RingRx\x00'}, {"42cafde93dabdd36872f1ac5cb3659e94f7a6daf4a0544120687c8fae4cc91c9c50713e2fda8d72e5ccf2b307f202d88a2d8fd04bdcd69abecc64265153b742b"}}}}}, {&(0x7f0000000440)={'Accelerator1\x00'}}}}, 0x7}) (async) pipe2$watch_queue(&(0x7f0000000240), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) (async) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) (async) 03:49:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) (async) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) read$char_usb(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="325a4458eb3b5411de8240ee9068b416", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="325a4458eb3b5411de8240ee9068b416", 0x10) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000400)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}]}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) close$fd_v4l2_buffer(r2) [ 1215.471146] QAT: failed to copy from user cfg_data. 03:49:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x401, 0x6, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x2, 0xc, 0xbe, 0x3, 0x1, 0x0, "015cc65c"}, 0x2, 0x4, {}, 0x20}) 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x303082) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3f, 0xc, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x2, 0x2, 0x4, 0x6, 0x4, 0x1f, "7a6b7ec0"}, 0x6a5a0000, 0x4, {}, 0x80000000}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa36d}, 0x8) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) 03:49:22 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @auto="ee265c99401c258e"}}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24000, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000300)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000880)={0x4, 0x8, 0xfa00, {r5, 0x7}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="00000100ffffffe9ffff"]) ioctl$IOCTL_START_ACCEL_DEV(r9, 0x40096102, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator1\x00', {&(0x7f0000000400)=@adf_dec={@format={'Cy', '0', 'RingTx\x00'}, {0x8}, {&(0x7f0000000340)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0xa700000000000000}}}}}, {&(0x7f0000000640)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_dec={@format={'Dc', '2', 'NumConcurrentAsymRequests\x00'}, {0x8001}, {&(0x7f00000004c0)=@adf_dec={@format={'Cy', '1', 'RingTx\x00'}, {0x7fffffff}}}}}}}}}, 0x9}) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000940)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e21, 0x1c0, @loopback, 0x7}, r11}}, 0x38) readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/241, 0xf1) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000400)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}]}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) close$fd_v4l2_buffer(r2) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x401, 0x6, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x2, 0xc, 0xbe, 0x3, 0x1, 0x0, "015cc65c"}, 0x2, 0x4, {}, 0x20}) [ 1215.560436] QAT: failed to copy from user cfg_data. [ 1215.570961] QAT: failed to copy from user cfg_data. 03:49:22 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x622801, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "339eadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x9fc, 0x3, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@format={'Cy', '3', 'RingSymRx\x00'}, {"d6293f686cfbc6828f9bc7981a9a1f1c81451a66395f896cd7fe9790b693445df69b240ad53f03e8112a86f9029d35a8bdd42c0f766f97b63d2a62d994cbcec7"}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0xb03}}}}}, {&(0x7f00000001c0)={'Accelerator1\x00'}}}}, 0x58}) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000400)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000240)=[{}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}]}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) close$fd_v4l2_buffer(r2) 03:49:22 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @auto="ee265c99401c258e"}}) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24000, 0x0) (async) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000300)) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000880)={0x4, 0x8, 0xfa00, {r5, 0x7}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="00000100ffffffe9ffff"]) ioctl$IOCTL_START_ACCEL_DEV(r9, 0x40096102, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator1\x00', {&(0x7f0000000400)=@adf_dec={@format={'Cy', '0', 'RingTx\x00'}, {0x8}, {&(0x7f0000000340)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0xa700000000000000}}}}}, {&(0x7f0000000640)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_dec={@format={'Dc', '2', 'NumConcurrentAsymRequests\x00'}, {0x8001}, {&(0x7f00000004c0)=@adf_dec={@format={'Cy', '1', 'RingTx\x00'}, {0x7fffffff}}}}}}}}}, 0x9}) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000940)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e21, 0x1c0, @loopback, 0x7}, r11}}, 0x38) readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/241, 0xf1) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x521a00, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x10000) 03:49:22 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x622801, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) (async) 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "339eadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x9fc, 0x3, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@format={'Cy', '3', 'RingSymRx\x00'}, {"d6293f686cfbc6828f9bc7981a9a1f1c81451a66395f896cd7fe9790b693445df69b240ad53f03e8112a86f9029d35a8bdd42c0f766f97b63d2a62d994cbcec7"}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0xb03}}}}}, {&(0x7f00000001c0)={'Accelerator1\x00'}}}}, 0x58}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "339eadc3"}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x9fc, 0x3, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@format={'Cy', '3', 'RingSymRx\x00'}, {"d6293f686cfbc6828f9bc7981a9a1f1c81451a66395f896cd7fe9790b693445df69b240ad53f03e8112a86f9029d35a8bdd42c0f766f97b63d2a62d994cbcec7"}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0xb03}}}}}, {&(0x7f00000001c0)={'Accelerator1\x00'}}}}, 0x58}) (async) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x4, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "92b8d955"}, 0x401}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0xcd, 0x9, 0x4, 0x2, 0x20}, 0x14) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x521a00, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x10000) 03:49:22 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x622801, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x622801, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x4, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "92b8d955"}, 0x401}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0xcd, 0x9, 0x4, 0x2, 0x20}, 0x14) 03:49:22 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "339eadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x9fc, 0x3, 0x5, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@format={'Cy', '3', 'RingSymRx\x00'}, {"d6293f686cfbc6828f9bc7981a9a1f1c81451a66395f896cd7fe9790b693445df69b240ad53f03e8112a86f9029d35a8bdd42c0f766f97b63d2a62d994cbcec7"}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0xb03}}}}}, {&(0x7f00000001c0)={'Accelerator1\x00'}}}}, 0x58}) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x4, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "92b8d955"}, 0x401}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0xcd, 0x9, 0x4, 0x2, 0x20}, 0x14) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x521a00, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x12}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) (async) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x10000) 03:49:22 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) (async) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/48, 0x30) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @auto="ee265c99401c258e"}}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x24000, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) (async) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000300)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000880)={0x4, 0x8, 0xfa00, {r5, 0x7}}, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="00000100ffffffe9ffff"]) ioctl$IOCTL_START_ACCEL_DEV(r9, 0x40096102, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator1\x00', {&(0x7f0000000400)=@adf_dec={@format={'Cy', '0', 'RingTx\x00'}, {0x8}, {&(0x7f0000000340)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {0xa700000000000000}}}}}, {&(0x7f0000000640)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_dec={@format={'Dc', '2', 'NumConcurrentAsymRequests\x00'}, {0x8001}, {&(0x7f00000004c0)=@adf_dec={@format={'Cy', '1', 'RingTx\x00'}, {0x7fffffff}}}}}}}}}, 0x9}) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000940)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e21, 0x1c0, @loopback, 0x7}, r11}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e21, 0x1c0, @loopback, 0x7}, r11}}, 0x38) readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/241, 0xf1) 03:49:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:22 executing program 4: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x0, @ib={0x1b, 0x5, 0x5, {"4b8f246810b2a703ba64c58fb81d6d54"}, 0x9, 0x7, 0xa3aa}}}, 0xa0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) 03:49:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:22 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140015363b7e9d6223cf6b00", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x2000) 03:49:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x80, 0x20, 0x3, 0x42, {{0x2a, 0x4, 0x3, 0x7, 0xa8, 0x64, 0x0, 0x35, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @end, @timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x3, [{@local, 0x4}, {@empty, 0x3}, {@private=0xa010101, 0x608b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcf8}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0x6, [{@multicast1, 0x7}, {@rand_addr=0x64010100, 0x5}, {@local, 0x6}, {@local, 0x8}, {@empty, 0xbb21}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x8, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}, {@remote, 0x7}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000017c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x7, 0x6, {{0x22, 0x4, 0x1, 0x8, 0x88, 0x65, 0x0, 0x3f, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x4, [{@multicast1}]}, @timestamp={0x44, 0x18, 0xd3, 0x0, 0x0, [0x1, 0x8000, 0xc0000000, 0x401, 0x521d1a6c]}, @rr={0x7, 0x1b, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @broadcast, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x7, 0xa1, [@private=0xa010101]}, @noop, @noop, @ssrr={0x89, 0x7, 0xb5, [@broadcast]}, @generic={0x16, 0x11, "2f8b99fb3d3a4360138f46cf21cd31"}, @rr={0x7, 0x13, 0xc0, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x4, 0x1, {{0x4e, 0x4, 0x0, 0x22, 0x138, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, {[@cipso={0x86, 0x20, 0x0, [{0x6, 0x3, "e9"}, {0x5, 0x4, "40bf"}, {0x2, 0x8, "280883374484"}, {0x2, 0xb, "7930c0b4f0cd00b9ea"}]}, @cipso={0x86, 0x55, 0x3, [{0x3, 0x7, "02f4a9fdd2"}, {0x7, 0x4, "ffce"}, {0x0, 0xa, "c7247a71cb34330f"}, {0x5, 0x9, "092b218b238baf"}, {0x5, 0x4, "ef64"}, {0x2, 0xb, "1de1f5e7dffc5368b8"}, {0x0, 0xb, "be5bf778ac10f8f0d8"}, {0x0, 0x6, "9b89aea7"}, {0x0, 0x11, "031528191cf0de71c69548216acac9"}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x7, [0x2b]}, @cipso={0x86, 0x46, 0x1, [{0x1, 0x12, "f203ffda1fc1527454d45557fe8d63cb"}, {0x6, 0xc, "9af0788688a5ddbdfde7"}, {0x0, 0xe, "52309138becca540925d49be"}, {0x5, 0xf, "a495a4dc69036e297fe6d5f11f"}, {0x5, 0x5, "a733d2"}]}, @cipso={0x86, 0x44, 0x3, [{0x7, 0xf, "205d7cab1626d6c8d0056c39ca"}, {0x2, 0xe, "808b8ee2b7e687e413eb85b7"}, {0x1, 0xc, "42879ed21305ba65e418"}, {0x6, 0x7, "deadeafe57"}, {0x2, 0xe, "f74ea0f440cac1d024963222"}]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0xd, [{@multicast2, 0x60b4}, {@rand_addr=0x64010101, 0x7f}, {@local, 0x8}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], 0x0, 0x8, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000000e40)={0x8c8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe356}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x4, 0x5c, 0x6}, {0xfff8, 0x4, 0x4, 0x800}, {0x1, 0xff}]}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc90}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x93}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x471}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008884) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140015363b7e9d6223cf6b00", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) (async) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x2000) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x80, 0x20, 0x3, 0x42, {{0x2a, 0x4, 0x3, 0x7, 0xa8, 0x64, 0x0, 0x35, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @end, @timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x3, [{@local, 0x4}, {@empty, 0x3}, {@private=0xa010101, 0x608b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcf8}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0x6, [{@multicast1, 0x7}, {@rand_addr=0x64010100, 0x5}, {@local, 0x6}, {@local, 0x8}, {@empty, 0xbb21}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x8, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}, {@remote, 0x7}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000017c0)) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x7, 0x6, {{0x22, 0x4, 0x1, 0x8, 0x88, 0x65, 0x0, 0x3f, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x4, [{@multicast1}]}, @timestamp={0x44, 0x18, 0xd3, 0x0, 0x0, [0x1, 0x8000, 0xc0000000, 0x401, 0x521d1a6c]}, @rr={0x7, 0x1b, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @broadcast, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x7, 0xa1, [@private=0xa010101]}, @noop, @noop, @ssrr={0x89, 0x7, 0xb5, [@broadcast]}, @generic={0x16, 0x11, "2f8b99fb3d3a4360138f46cf21cd31"}, @rr={0x7, 0x13, 0xc0, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x4, 0x1, {{0x4e, 0x4, 0x0, 0x22, 0x138, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, {[@cipso={0x86, 0x20, 0x0, [{0x6, 0x3, "e9"}, {0x5, 0x4, "40bf"}, {0x2, 0x8, "280883374484"}, {0x2, 0xb, "7930c0b4f0cd00b9ea"}]}, @cipso={0x86, 0x55, 0x3, [{0x3, 0x7, "02f4a9fdd2"}, {0x7, 0x4, "ffce"}, {0x0, 0xa, "c7247a71cb34330f"}, {0x5, 0x9, "092b218b238baf"}, {0x5, 0x4, "ef64"}, {0x2, 0xb, "1de1f5e7dffc5368b8"}, {0x0, 0xb, "be5bf778ac10f8f0d8"}, {0x0, 0x6, "9b89aea7"}, {0x0, 0x11, "031528191cf0de71c69548216acac9"}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x7, [0x2b]}, @cipso={0x86, 0x46, 0x1, [{0x1, 0x12, "f203ffda1fc1527454d45557fe8d63cb"}, {0x6, 0xc, "9af0788688a5ddbdfde7"}, {0x0, 0xe, "52309138becca540925d49be"}, {0x5, 0xf, "a495a4dc69036e297fe6d5f11f"}, {0x5, 0x5, "a733d2"}]}, @cipso={0x86, 0x44, 0x3, [{0x7, 0xf, "205d7cab1626d6c8d0056c39ca"}, {0x2, 0xe, "808b8ee2b7e687e413eb85b7"}, {0x1, 0xc, "42879ed21305ba65e418"}, {0x6, 0x7, "deadeafe57"}, {0x2, 0xe, "f74ea0f440cac1d024963222"}]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0xd, [{@multicast2, 0x60b4}, {@rand_addr=0x64010101, 0x7f}, {@local, 0x8}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], 0x0, 0x8, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000000e40)={0x8c8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe356}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x4, 0x5c, 0x6}, {0xfff8, 0x4, 0x4, 0x800}, {0x1, 0xff}]}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc90}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x93}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x471}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008884) 03:49:23 executing program 4: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8}, 0x10) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x0, @ib={0x1b, 0x5, 0x5, {"4b8f246810b2a703ba64c58fb81d6d54"}, 0x9, 0x7, 0xa3aa}}}, 0xa0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140015363b7e9d6223cf6b00", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) (async) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x2000) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x11, 0x6, {}, {}, 0x8}) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (rerun: 32) 03:49:23 executing program 4: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x0, @ib={0x1b, 0x5, 0x5, {"4b8f246810b2a703ba64c58fb81d6d54"}, 0x9, 0x7, 0xa3aa}}}, 0xa0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8}, 0x10) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000002c0), 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r3, 0x1c, 0x0, @ib={0x1b, 0x5, 0x5, {"4b8f246810b2a703ba64c58fb81d6d54"}, 0x9, 0x7, 0xa3aa}}}, 0xa0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) (async) 03:49:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1000}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515a80, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x11, 0x6, {}, {}, 0x8}) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x80, 0x20, 0x3, 0x42, {{0x2a, 0x4, 0x3, 0x7, 0xa8, 0x64, 0x0, 0x35, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @end, @timestamp_prespec={0x44, 0x3c, 0x12, 0x3, 0x3, [{@local, 0x4}, {@empty, 0x3}, {@private=0xa010101, 0x608b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcf8}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0x6, [{@multicast1, 0x7}, {@rand_addr=0x64010100, 0x5}, {@local, 0x6}, {@local, 0x8}, {@empty, 0xbb21}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x8, [{@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}, {@remote, 0x7}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000017c0)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x7, 0x6, {{0x22, 0x4, 0x1, 0x8, 0x88, 0x65, 0x0, 0x3f, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x4, [{@multicast1}]}, @timestamp={0x44, 0x18, 0xd3, 0x0, 0x0, [0x1, 0x8000, 0xc0000000, 0x401, 0x521d1a6c]}, @rr={0x7, 0x1b, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @broadcast, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x7, 0xa1, [@private=0xa010101]}, @noop, @noop, @ssrr={0x89, 0x7, 0xb5, [@broadcast]}, @generic={0x16, 0x11, "2f8b99fb3d3a4360138f46cf21cd31"}, @rr={0x7, 0x13, 0xc0, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x4, 0x1, {{0x4e, 0x4, 0x0, 0x22, 0x138, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, {[@cipso={0x86, 0x20, 0x0, [{0x6, 0x3, "e9"}, {0x5, 0x4, "40bf"}, {0x2, 0x8, "280883374484"}, {0x2, 0xb, "7930c0b4f0cd00b9ea"}]}, @cipso={0x86, 0x55, 0x3, [{0x3, 0x7, "02f4a9fdd2"}, {0x7, 0x4, "ffce"}, {0x0, 0xa, "c7247a71cb34330f"}, {0x5, 0x9, "092b218b238baf"}, {0x5, 0x4, "ef64"}, {0x2, 0xb, "1de1f5e7dffc5368b8"}, {0x0, 0xb, "be5bf778ac10f8f0d8"}, {0x0, 0x6, "9b89aea7"}, {0x0, 0x11, "031528191cf0de71c69548216acac9"}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x7, [0x2b]}, @cipso={0x86, 0x46, 0x1, [{0x1, 0x12, "f203ffda1fc1527454d45557fe8d63cb"}, {0x6, 0xc, "9af0788688a5ddbdfde7"}, {0x0, 0xe, "52309138becca540925d49be"}, {0x5, 0xf, "a495a4dc69036e297fe6d5f11f"}, {0x5, 0x5, "a733d2"}]}, @cipso={0x86, 0x44, 0x3, [{0x7, 0xf, "205d7cab1626d6c8d0056c39ca"}, {0x2, 0xe, "808b8ee2b7e687e413eb85b7"}, {0x1, 0xc, "42879ed21305ba65e418"}, {0x6, 0x7, "deadeafe57"}, {0x2, 0xe, "f74ea0f440cac1d024963222"}]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0xd, [{@multicast2, 0x60b4}, {@rand_addr=0x64010101, 0x7f}, {@local, 0x8}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], 0x0, 0x8, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000000e40)={0x8c8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe356}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x4, 0x5c, 0x6}, {0xfff8, 0x4, 0x4, 0x800}, {0x1, 0xff}]}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x586}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc90}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x93}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x471}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008884) 03:49:23 executing program 0: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) 03:49:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1000}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515a80, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x82000) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x101, 0x6, 0x4, 0x0, 0x8, {0x77359400}, {0x4, 0x1, 0x7f, 0x2, 0x80, 0x8, "58d48c19"}, 0x4, 0x4, {}, 0xd0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffd, 0xb, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "a7b8d955"}, 0x20000, 0x4, {0xffffffffffffffff}, 0x0, 0x0, r2}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x5297589d, 0xa, 0x4, 0x1000, 0x2, {}, {0x5, 0x2, 0xff, 0x9, 0x1, 0x55, "c48dfc04"}, 0x2, 0x4, {}, 0x1000, 0x0, r4}) 03:49:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x208282, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x202, 0x452101) read$char_usb(r0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'vlan1\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="7a4788d5ef42265afaf13972100b11f5b10b707dce0d49f92411977197f9e55b165c589a74cf97e7f5d97ffe90af6b30d956697280f55b3d90dd60ac2d3f8ffb915e1f70ae75ea5ead209e4d0c55cb311f6cc0057552535100b2b6f698ec09fdb1c37f7e9c036788d1a16f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x11, 0x6, {}, {}, 0x8}) (rerun: 64) 03:49:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x208282, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1000}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515a80, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) (async) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x82000) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x101, 0x6, 0x4, 0x0, 0x8, {0x77359400}, {0x4, 0x1, 0x7f, 0x2, 0x80, 0x8, "58d48c19"}, 0x4, 0x4, {}, 0xd0}) (async, rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffd, 0xb, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "a7b8d955"}, 0x20000, 0x4, {0xffffffffffffffff}, 0x0, 0x0, r2}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x5297589d, 0xa, 0x4, 0x1000, 0x2, {}, {0x5, 0x2, 0xff, 0x9, 0x1, 0x55, "c48dfc04"}, 0x2, 0x4, {}, 0x1000, 0x0, r4}) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000540), 0x8000000000000001, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000480)={{&(0x7f0000000380)={'Accelerator1\x00', {&(0x7f00000000c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000000)=@adf_dec={@normal='NumberDcInstances\x00', {0x8001}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {"511f7e3a63792a04fbc2d7b3745f9c14b3c3bf6be8503b9cb1730af095b12121ce4143d5b1673adbbb109b8abc8a742c78bc42c15e20823261ee0474ce17535c"}, {&(0x7f0000000180)=@adf_str={@format={'Dc', '1', 'RingAsymRx\x00'}, {"11b3469fcb463f690a70db39eddcb03d21a135da4be95dcf9f943d97be0f18cbcd7981ad4d8d008525867847ded971df93f6fd3bab685dccb081b690acfac9df"}}}}}}}}}, 0x1}) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x90001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x67, 0x40, 0x0, 0x2, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x28000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}, @alu={0x7, 0x0, 0x6, 0x1, 0xc, 0x4, 0x8}, @map_fd={0x18, 0x5}, @exit], &(0x7f0000000100)='GPL\x00', 0x5, 0x78, &(0x7f0000000140)=""/120, 0x41000, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x2, 0x7}, 0x10, r1, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000540), 0x8000000000000001, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000480)={{&(0x7f0000000380)={'Accelerator1\x00', {&(0x7f00000000c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000000)=@adf_dec={@normal='NumberDcInstances\x00', {0x8001}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {"511f7e3a63792a04fbc2d7b3745f9c14b3c3bf6be8503b9cb1730af095b12121ce4143d5b1673adbbb109b8abc8a742c78bc42c15e20823261ee0474ce17535c"}, {&(0x7f0000000180)=@adf_str={@format={'Dc', '1', 'RingAsymRx\x00'}, {"11b3469fcb463f690a70db39eddcb03d21a135da4be95dcf9f943d97be0f18cbcd7981ad4d8d008525867847ded971df93f6fd3bab685dccb081b690acfac9df"}}}}}}}}}, 0x1}) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x82000) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x101, 0x6, 0x4, 0x0, 0x8, {0x77359400}, {0x4, 0x1, 0x7f, 0x2, 0x80, 0x8, "58d48c19"}, 0x4, 0x4, {}, 0xd0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffd, 0xb, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "a7b8d955"}, 0x20000, 0x4, {0xffffffffffffffff}, 0x0, 0x0, r2}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x5297589d, 0xa, 0x4, 0x1000, 0x2, {}, {0x5, 0x2, 0xff, 0x9, 0x1, 0x55, "c48dfc04"}, 0x2, 0x4, {}, 0x1000, 0x0, r4}) syz_open_dev$video(&(0x7f0000000000), 0x2, 0x82000) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x101, 0x6, 0x4, 0x0, 0x8, {0x77359400}, {0x4, 0x1, 0x7f, 0x2, 0x80, 0x8, "58d48c19"}, 0x4, 0x4, {}, 0xd0}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffd, 0xb, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "a7b8d955"}, 0x20000, 0x4, {}, 0x0, 0x0, r2}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x5297589d, 0xa, 0x4, 0x1000, 0x2, {}, {0x5, 0x2, 0xff, 0x9, 0x1, 0x55, "c48dfc04"}, 0x2, 0x4, {}, 0x1000, 0x0, r4}) (async) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x202, 0x452101) read$char_usb(r0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'vlan1\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="7a4788d5ef42265afaf13972100b11f5b10b707dce0d49f92411977197f9e55b165c589a74cf97e7f5d97ffe90af6b30d956697280f55b3d90dd60ac2d3f8ffb915e1f70ae75ea5ead209e4d0c55cb311f6cc0057552535100b2b6f698ec09fdb1c37f7e9c036788d1a16f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x90001) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x67, 0x40, 0x0, 0x2, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x28000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}, @alu={0x7, 0x0, 0x6, 0x1, 0xc, 0x4, 0x8}, @map_fd={0x18, 0x5}, @exit], &(0x7f0000000100)='GPL\x00', 0x5, 0x78, &(0x7f0000000140)=""/120, 0x41000, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x2, 0x7}, 0x10, r1, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_getres(0x6, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0xb, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0x2, 0xc, 0x0, 0x0, 0x4, 0x8, "737bcf13"}, 0x1c00, 0x4, {}, 0x4}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) getdents64(r3, &(0x7f0000000100)=""/90, 0x5a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x620040, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_unlink_exit\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x1, 0x7f, 0x7, 0x20, 0x5, 0x1, 0x3f}, &(0x7f0000000240)={0x6, 0x40, 0x80000001, 0x9, 0x1f, 0xb680, 0x5, 0xcff}, &(0x7f0000000280)={0x101, 0xdbbd, 0x0, 0x6, 0x4, 0x101, 0x2, 0x4}, &(0x7f00000002c0), &(0x7f0000000380)={&(0x7f0000000340)={[0x3]}, 0x8}) getdents64(r4, &(0x7f0000000440)=""/25, 0x19) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) 03:49:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x208282, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_getres(0x6, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0xb, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0x2, 0xc, 0x0, 0x0, 0x4, 0x8, "737bcf13"}, 0x1c00, 0x4, {}, 0x4}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0xb, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0x2, 0xc, 0x0, 0x0, 0x4, 0x8, "737bcf13"}, 0x1c00, 0x4, {}, 0x4}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) getdents64(r3, &(0x7f0000000100)=""/90, 0x5a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x620040, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_unlink_exit\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0x1, 0x7f, 0x7, 0x20, 0x5, 0x1, 0x3f}, &(0x7f0000000240)={0x6, 0x40, 0x80000001, 0x9, 0x1f, 0xb680, 0x5, 0xcff}, &(0x7f0000000280)={0x101, 0xdbbd, 0x0, 0x6, 0x4, 0x101, 0x2, 0x4}, &(0x7f00000002c0), &(0x7f0000000380)={&(0x7f0000000340)={[0x3]}, 0x8}) getdents64(r4, &(0x7f0000000440)=""/25, 0x19) (async) getdents64(r4, &(0x7f0000000440)=""/25, 0x19) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000540), 0x8000000000000001, 0x1) (async) syz_open_dev$video(&(0x7f0000000540), 0x8000000000000001, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000480)={{&(0x7f0000000380)={'Accelerator1\x00', {&(0x7f00000000c0)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000000)=@adf_dec={@normal='NumberDcInstances\x00', {0x8001}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_str={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {"511f7e3a63792a04fbc2d7b3745f9c14b3c3bf6be8503b9cb1730af095b12121ce4143d5b1673adbbb109b8abc8a742c78bc42c15e20823261ee0474ce17535c"}, {&(0x7f0000000180)=@adf_str={@format={'Dc', '1', 'RingAsymRx\x00'}, {"11b3469fcb463f690a70db39eddcb03d21a135da4be95dcf9f943d97be0f18cbcd7981ad4d8d008525867847ded971df93f6fd3bab685dccb081b690acfac9df"}}}}}}}}}, 0x1}) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040), 0x202, 0x452101) read$char_usb(r0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'vlan1\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="7a4788d5ef42265afaf13972100b11f5b10b707dce0d49f92411977197f9e55b165c589a74cf97e7f5d97ffe90af6b30d956697280f55b3d90dd60ac2d3f8ffb915e1f70ae75ea5ead209e4d0c55cb311f6cc0057552535100b2b6f698ec09fdb1c37f7e9c036788d1a16f"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x90001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x67, 0x40, 0x0, 0x2, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x67, 0x40, 0x0, 0x2, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x28000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}, @alu={0x7, 0x0, 0x6, 0x1, 0xc, 0x4, 0x8}, @map_fd={0x18, 0x5}, @exit], &(0x7f0000000100)='GPL\x00', 0x5, 0x78, &(0x7f0000000140)=""/120, 0x41000, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x2, 0x7}, 0x10, r1, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x16, 0x9, 0x4, 0x80, 0x884, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x8f, 0x8, 0x80000001, 0x1100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x4, 0x1, 0x20, 0x4}], &(0x7f0000000080)='GPL\x00', 0x401, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0xffffffb8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, r3, r4, r5]}, 0x80) 03:49:23 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) read$char_usb(r1, 0x0, 0x0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) clock_getres(0x6, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x4, 0xb, 0x4, 0x0, 0x7, {r1, r2/1000+60000}, {0x2, 0xc, 0x0, 0x0, 0x4, 0x8, "737bcf13"}, 0x1c00, 0x4, {}, 0x4}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) getdents64(r3, &(0x7f0000000100)=""/90, 0x5a) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x620040, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_unlink_exit\x00'}, 0x10) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x1, 0x7f, 0x7, 0x20, 0x5, 0x1, 0x3f}, &(0x7f0000000240)={0x6, 0x40, 0x80000001, 0x9, 0x1f, 0xb680, 0x5, 0xcff}, &(0x7f0000000280)={0x101, 0xdbbd, 0x0, 0x6, 0x4, 0x101, 0x2, 0x4}, &(0x7f00000002c0), &(0x7f0000000380)={&(0x7f0000000340)={[0x3]}, 0x8}) (async) getdents64(r4, &(0x7f0000000440)=""/25, 0x19) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) 03:49:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x4442, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000980)=@gcm_128={{}, "bf3c61a969f836b2", "7b3a203d64798e1528527ad2f61c3132", "a1f77242", "890d465077e904ae"}, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="780000084000000000000400461000580066000064010101e0000001830781ac1414aa4407401b9e601c44348021640101010000a80c7f000001000007ff0000000000000008ac1e0001004000000000000000000522000000000000647a4b71"]}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4b8, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x7, 0x78}, {0xfff, 0x8, 0x8, 0x57b0}, {0x7, 0xff, 0x7, 0x9}, {0x5, 0x9, 0x40, 0x1}, {0x2, 0x2, 0xff, 0x6}, {0x3ff, 0x62, 0x3, 0x101}, {0xfff9, 0x0, 0x1, 0xdc5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x800c1}, 0x4044804) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000100)={0x3, 0x0, [{0x80, 0x4, 0xdd, [0x400, 0xaf7, 0x4, 0x9, 0x8, 0x6, 0x9a, 0x44]}, {0x9, 0x1, 0x200, [0x80, 0x6, 0x40001fd, 0x2, 0xfff, 0x59e, 0x401, 0x4]}, {0xfffeffff, 0x3, 0x1, [0x9, 0x2, 0xcdc4, 0xcaf, 0x8, 0xffffffff, 0x7, 0x2807]}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$char_usb(r1, &(0x7f0000000000)="4afad6ee19ebd006382ed005cc4827e5971f6fa2c49ee7ee28287f3029b19cf91a2138a6349c8bed72326e9a13d5407cbbc18faef6f210fbb05e13fa39b7e92c5a363e2e352d199b5fadc0b6108e4c10971f271744deb7af1f9ad640acab62e3b63c44e320b42b2b52a1bb5bf84d47d62ca5e33d36d9710624211b98bd2170687f7fb63b9afd29d8f29b6e46fa8c6dd791533842acc230d18e6b", 0x9a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)={'nicvf0\x00'}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x137842, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, 0x0) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}], 0x1) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x16, 0x9, 0x4, 0x80, 0x884, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x8f, 0x8, 0x80000001, 0x1100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x4, 0x1, 0x20, 0x4}], &(0x7f0000000080)='GPL\x00', 0x401, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0xffffffb8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, r3, r4, r5]}, 0x80) 03:49:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000400)={0xfffffffb, 0x2, 0x4, 0x0, 0x7f, {}, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, "ff0100"}, 0x3ff}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000280)) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@format={'Cy', '1', 'RingTx\x00'}, {0x237}, {&(0x7f0000000400)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000340)=@adf_hex={@format={'Dc', '0', 'BankNumber\x00'}, {0x7fffffff}}}}}}}}}, 0x2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) statx(r3, &(0x7f00000007c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000840)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 03:49:23 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) read$char_usb(r1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) read$char_usb(r1, 0x0, 0x0) (async) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}], 0x1) 03:49:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000400)={0xfffffffb, 0x2, 0x4, 0x0, 0x7f, {}, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, "ff0100"}, 0x3ff}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000400)={0xfffffffb, 0x2, 0x4, 0x0, 0x7f, {}, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, "ff0100"}, 0x3ff}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) (async) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x16, 0x9, 0x4, 0x80, 0x884, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x8f, 0x8, 0x80000001, 0x1100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x4, 0x1, 0x20, 0x4}], &(0x7f0000000080)='GPL\x00', 0x401, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0xffffffb8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, r3, r4, r5]}, 0x80) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x16, 0x9, 0x4, 0x80, 0x884, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x8f, 0x8, 0x80000001, 0x1100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x8}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x4, 0x1, 0x20, 0x4}], &(0x7f0000000080)='GPL\x00', 0x401, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0xffffffb8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0xffffffffffffffff, r3, r4, r5]}, 0x80) (async) 03:49:23 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) read$char_usb(r1, 0x0, 0x0) (async) read$char_usb(r1, 0x0, 0x0) 03:49:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x4442, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000980)=@gcm_128={{}, "bf3c61a969f836b2", "7b3a203d64798e1528527ad2f61c3132", "a1f77242", "890d465077e904ae"}, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="780000084000000000000400461000580066000064010101e0000001830781ac1414aa4407401b9e601c44348021640101010000a80c7f000001000007ff0000000000000008ac1e0001004000000000000000000522000000000000647a4b71"]}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4b8, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x7, 0x78}, {0xfff, 0x8, 0x8, 0x57b0}, {0x7, 0xff, 0x7, 0x9}, {0x5, 0x9, 0x40, 0x1}, {0x2, 0x2, 0xff, 0x6}, {0x3ff, 0x62, 0x3, 0x101}, {0xfff9, 0x0, 0x1, 0xdc5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x800c1}, 0x4044804) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000100)={0x3, 0x0, [{0x80, 0x4, 0xdd, [0x400, 0xaf7, 0x4, 0x9, 0x8, 0x6, 0x9a, 0x44]}, {0x9, 0x1, 0x200, [0x80, 0x6, 0x40001fd, 0x2, 0xfff, 0x59e, 0x401, 0x4]}, {0xfffeffff, 0x3, 0x1, [0x9, 0x2, 0xcdc4, 0xcaf, 0x8, 0xffffffff, 0x7, 0x2807]}]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$char_usb(r1, &(0x7f0000000000)="4afad6ee19ebd006382ed005cc4827e5971f6fa2c49ee7ee28287f3029b19cf91a2138a6349c8bed72326e9a13d5407cbbc18faef6f210fbb05e13fa39b7e92c5a363e2e352d199b5fadc0b6108e4c10971f271744deb7af1f9ad640acab62e3b63c44e320b42b2b52a1bb5bf84d47d62ca5e33d36d9710624211b98bd2170687f7fb63b9afd29d8f29b6e46fa8c6dd791533842acc230d18e6b", 0x9a) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)={'nicvf0\x00'}) (async) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x137842, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, 0x0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000280)) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@format={'Cy', '1', 'RingTx\x00'}, {0x237}, {&(0x7f0000000400)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000340)=@adf_hex={@format={'Dc', '0', 'BankNumber\x00'}, {0x7fffffff}}}}}}}}}, 0x2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) statx(r3, &(0x7f00000007c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000840)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}], 0x1) (rerun: 64) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x1670ef27c25a52fb) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x1, 0xc, 0x81, 0x8, 0x1f, 0x46, "191f8887"}, 0x6, 0x4, {}, 0x7f, 0x0, r2}) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000280)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@format={'Cy', '1', 'RingTx\x00'}, {0x237}, {&(0x7f0000000400)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000340)=@adf_hex={@format={'Dc', '0', 'BankNumber\x00'}, {0x7fffffff}}}}}}}}}, 0x2}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async, rerun: 64) statx(r3, &(0x7f00000007c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000840)) (async, rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 03:49:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x4442, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000980)=@gcm_128={{}, "bf3c61a969f836b2", "7b3a203d64798e1528527ad2f61c3132", "a1f77242", "890d465077e904ae"}, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="780000084000000000000400461000580066000064010101e0000001830781ac1414aa4407401b9e601c44348021640101010000a80c7f000001000007ff0000000000000008ac1e0001004000000000000000000522000000000000647a4b71"]}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x4b8, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x7, 0x78}, {0xfff, 0x8, 0x8, 0x57b0}, {0x7, 0xff, 0x7, 0x9}, {0x5, 0x9, 0x40, 0x1}, {0x2, 0x2, 0xff, 0x6}, {0x3ff, 0x62, 0x3, 0x101}, {0xfff9, 0x0, 0x1, 0xdc5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x800c1}, 0x4044804) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000100)={0x3, 0x0, [{0x80, 0x4, 0xdd, [0x400, 0xaf7, 0x4, 0x9, 0x8, 0x6, 0x9a, 0x44]}, {0x9, 0x1, 0x200, [0x80, 0x6, 0x40001fd, 0x2, 0xfff, 0x59e, 0x401, 0x4]}, {0xfffeffff, 0x3, 0x1, [0x9, 0x2, 0xcdc4, 0xcaf, 0x8, 0xffffffff, 0x7, 0x2807]}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$char_usb(r1, &(0x7f0000000000)="4afad6ee19ebd006382ed005cc4827e5971f6fa2c49ee7ee28287f3029b19cf91a2138a6349c8bed72326e9a13d5407cbbc18faef6f210fbb05e13fa39b7e92c5a363e2e352d199b5fadc0b6108e4c10971f271744deb7af1f9ad640acab62e3b63c44e320b42b2b52a1bb5bf84d47d62ca5e33d36d9710624211b98bd2170687f7fb63b9afd29d8f29b6e46fa8c6dd791533842acc230d18e6b", 0x9a) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)={'nicvf0\x00'}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x137842, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, 0x0) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x7, 0x20080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="96b98d231b75f9bb90769c16bcf85fe9b854c82a2590562c4da70030dae1b5a4d3ac96100468a88533ddcf871694c9798d697b8db7b4fa8d912156415d48e42b034740a0efe64f6d89a0e1b91e77e7bb7fd5f5591c60e85e2b7647ea27e2eb616f1a26f7fbe47cde03f8c606537dd322335200", &(0x7f0000000140)=@tcp6=r1, 0x1}, 0x20) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async, rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x1670ef27c25a52fb) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x1, 0xc, 0x81, 0x8, 0x1f, 0x46, "191f8887"}, 0x6, 0x4, {}, 0x7f, 0x0, r2}) 03:49:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000400)={0xfffffffb, 0x2, 0x4, 0x0, 0x7f, {}, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, "ff0100"}, 0x3ff}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_open_dev$video(&(0x7f0000000b80), 0x3, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r2, 0x25, 0x9}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r3, r4, 0x25, 0x1c}, 0x10) read$char_usb(r0, 0x0, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x42400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x24, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={r7}, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x800, 0x5, 0x4, 0xe000, 0x4, {0x0, 0xea60}, {0x7, 0x2, 0x7, 0x44, 0x9, 0x7, "83112198"}, 0x56d7, 0x4, {}, 0xe45b}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r9, r10}, 0x10) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x7, 0x20080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="96b98d231b75f9bb90769c16bcf85fe9b854c82a2590562c4da70030dae1b5a4d3ac96100468a88533ddcf871694c9798d697b8db7b4fa8d912156415d48e42b034740a0efe64f6d89a0e1b91e77e7bb7fd5f5591c60e85e2b7647ea27e2eb616f1a26f7fbe47cde03f8c606537dd322335200", &(0x7f0000000140)=@tcp6=r1, 0x1}, 0x20) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000200), 0x7, 0x20080) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="96b98d231b75f9bb90769c16bcf85fe9b854c82a2590562c4da70030dae1b5a4d3ac96100468a88533ddcf871694c9798d697b8db7b4fa8d912156415d48e42b034740a0efe64f6d89a0e1b91e77e7bb7fd5f5591c60e85e2b7647ea27e2eb616f1a26f7fbe47cde03f8c606537dd322335200", &(0x7f0000000140)=@tcp6=r1, 0x1}, 0x20) (async) 03:49:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040), 0x46, 0x210083) syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x2, "4a1bd919254992bca58321063c974c592e717884ee20b03c8baa785bbd21b4c30f0acf09cc52a9fc6d481750de51ed4c06b774dadd9c28768d39978e82e598b9c4ab65b44eefcd5f431e1ca5410e92d4b00ce45fdb90664c627d94e09055657a6a4b98aa433244bbde9706c44a8e7763394a371fec86f305e34bb9fbf9c6f3e9e1dfcfadd4e622ed2601d1c71c101753ace3c5327de710efe9df93a41c8da7b0dbd760ff5dbb5337bdd51e0bd755606fba966401dcb3afc004481401fb2df00a5489e789e7ffac997d99cd6814561c65fbf7de598a0501f38f12d303f5e06452d40333c130fc9812dfd8df26415297a389b9802007ff8dd2e6a4d1bf129bc33a", 0x57, 0x2, 0x1, 0x40, 0x3, 0x40, 0x1f, 0x1}}}, 0x120) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 03:49:23 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x1670ef27c25a52fb) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000000c0)={0x4, 0x1, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x1, 0xc, 0x81, 0x8, 0x1f, 0x46, "191f8887"}, 0x6, 0x4, {}, 0x7f, 0x0, r2}) 03:49:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_open_dev$video(&(0x7f0000000b80), 0x3, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r2, 0x25, 0x9}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r3, r4, 0x25, 0x1c}, 0x10) (async) read$char_usb(r0, 0x0, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 64) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x42400, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x24, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={r7}, 0x4) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x800, 0x5, 0x4, 0xe000, 0x4, {0x0, 0xea60}, {0x7, 0x2, 0x7, 0x44, 0x9, 0x7, "83112198"}, 0x56d7, 0x4, {}, 0xe45b}) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r9, r10}, 0x10) 03:49:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 03:49:23 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000200), 0x7, 0x20080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="96b98d231b75f9bb90769c16bcf85fe9b854c82a2590562c4da70030dae1b5a4d3ac96100468a88533ddcf871694c9798d697b8db7b4fa8d912156415d48e42b034740a0efe64f6d89a0e1b91e77e7bb7fd5f5591c60e85e2b7647ea27e2eb616f1a26f7fbe47cde03f8c606537dd322335200", &(0x7f0000000140)=@tcp6=r1, 0x1}, 0x20) 03:49:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1217.045009] QAT: failed to copy from user cfg_data. 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040), 0x46, 0x210083) syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) (async) syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x2, "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", 0x57, 0x2, 0x1, 0x40, 0x3, 0x40, 0x1f, 0x1}}}, 0x120) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, "0000fa00"}, 0x20000000, 0x4, {0xffffffffffffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r3}, 0x4) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) read$watch_queue(r4, &(0x7f0000000080)=""/92, 0x5c) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000500)={0x2, 0x4, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x1, 0xc, 0x1f, 0x2, 0x0, 0x9, "394a6aeb"}, 0x7ff, 0x4, {}, 0x800, 0x0, r5}) socket$inet_udplite(0x2, 0x2, 0x88) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 03:49:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000fef000/0x11000)=nil, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket(0x2, 0x80000, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_open_dev$video(&(0x7f0000000b80), 0x3, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r2, 0x25, 0x9}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r3, r4, 0x25, 0x1c}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r3, r4, 0x25, 0x1c}, 0x10) read$char_usb(r0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x42400, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x24, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x24, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={r7}, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x800, 0x5, 0x4, 0xe000, 0x4, {0x0, 0xea60}, {0x7, 0x2, 0x7, 0x44, 0x9, 0x7, "83112198"}, 0x56d7, 0x4, {}, 0xe45b}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r9, r10}, 0x10) 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040), 0x46, 0x210083) syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x2, "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", 0x57, 0x2, 0x1, 0x40, 0x3, 0x40, 0x1f, 0x1}}}, 0x120) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, "0000fa00"}, 0x20000000, 0x4, {0xffffffffffffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r3}, 0x4) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) read$watch_queue(r4, &(0x7f0000000080)=""/92, 0x5c) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000500)={0x2, 0x4, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x1, 0xc, 0x1f, 0x2, 0x0, 0x9, "394a6aeb"}, 0x7ff, 0x4, {}, 0x800, 0x0, r5}) (async) socket$inet_udplite(0x2, 0x2, 0x88) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 03:49:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000fef000/0x11000)=nil, 0x0) (async) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = socket(0x2, 0x80000, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 0: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000000000, 0x90404) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:24 executing program 1: syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x1d}, 0x10) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, "0000fa00"}, 0x20000000}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, "0000fa00"}, 0x20000000, 0x4, {0xffffffffffffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r3}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r3}, 0x4) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) read$watch_queue(r4, &(0x7f0000000080)=""/92, 0x5c) (async) read$watch_queue(r4, &(0x7f0000000080)=""/92, 0x5c) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000500)={0x2, 0x4, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x1, 0xc, 0x1f, 0x2, 0x0, 0x9, "394a6aeb"}, 0x7ff, 0x4, {}, 0x800, 0x0, r5}) socket$inet_udplite(0x2, 0x2, 0x88) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 0: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000000000, 0x90404) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x100000000000, 0x90404) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) 03:49:24 executing program 1: syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x1d}, 0x10) [ 1217.283060] QAT: failed to copy from user cfg_data. 03:49:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000fef000/0x11000)=nil, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket(0x2, 0x80000, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) (async) shmat(r0, &(0x7f0000fef000/0x11000)=nil, 0x0) (async) read$watch_queue(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) socket(0x2, 0x80000, 0x8001) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x1, &(0x7f0000000080)=""/28, 0x1c}, &(0x7f0000000100)=0x40) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x43a200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "40008000"}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/37, 0x25, 0x1, &(0x7f0000000100)=""/40, 0x28}, &(0x7f0000000180)=0x40) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x1, &(0x7f0000000080)=""/28, 0x1c}, &(0x7f0000000100)=0x40) 03:49:24 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x5, 0x0, [{0x8ac, 0xb75, 0xbdc, [0x1, 0x9, 0x5, 0x7f, 0x55, 0x8, 0x4]}, {0xa6, 0x80000000, 0x0, [0x6, 0x4, 0x4, 0x4, 0x0, 0xffffff7e, 0x800, 0x8]}, {0xffffffff, 0x1, 0x3, [0x7fffffff, 0xa3ba, 0x8, 0x9, 0x80, 0x1, 0xd393153, 0x7]}, {0x1000, 0x4, 0x4, [0x3f, 0x80000000, 0x80, 0x7fff, 0x6, 0x7fffffff, 0xa01, 0xffffffff]}, {0x1, 0x4, 0x9, [0x45, 0xffffffff, 0x80, 0x7, 0x10001, 0x614, 0x401, 0x5]}]}) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x43a200) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "40008000"}}) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/37, 0x25, 0x1, &(0x7f0000000100)=""/40, 0x28}, &(0x7f0000000180)=0x40) (rerun: 64) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x1, &(0x7f0000000080)=""/28, 0x1c}, &(0x7f0000000100)=0x40) [ 1217.390800] QAT: failed to copy from user cfg_data. [ 1217.406859] QAT: failed to copy from user cfg_data. 03:49:24 executing program 1: syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x1d}, 0x10) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) (async) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) (async) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x7) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x1d}, 0x10) (async) 03:49:24 executing program 0: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000000, 0x90404) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000000000, 0x90404) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x43a200) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "40008000"}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/37, 0x25, 0x1, &(0x7f0000000100)=""/40, 0x28}, &(0x7f0000000180)=0x40) 03:49:24 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x5, 0x0, [{0x8ac, 0xb75, 0xbdc, [0x1, 0x9, 0x5, 0x7f, 0x55, 0x8, 0x4]}, {0xa6, 0x80000000, 0x0, [0x6, 0x4, 0x4, 0x4, 0x0, 0xffffff7e, 0x800, 0x8]}, {0xffffffff, 0x1, 0x3, [0x7fffffff, 0xa3ba, 0x8, 0x9, 0x80, 0x1, 0xd393153, 0x7]}, {0x1000, 0x4, 0x4, [0x3f, 0x80000000, 0x80, 0x7fff, 0x6, 0x7fffffff, 0xa01, 0xffffffff]}, {0x1, 0x4, 0x9, [0x45, 0xffffffff, 0x80, 0x7, 0x10001, 0x614, 0x401, 0x5]}]}) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 03:49:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62, "33deadc3"}}) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator0\x00'}}, 0x6}) 03:49:24 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x5, 0x0, [{0x8ac, 0xb75, 0xbdc, [0x1, 0x9, 0x5, 0x7f, 0x55, 0x8, 0x4]}, {0xa6, 0x80000000, 0x0, [0x6, 0x4, 0x4, 0x4, 0x0, 0xffffff7e, 0x800, 0x8]}, {0xffffffff, 0x1, 0x3, [0x7fffffff, 0xa3ba, 0x8, 0x9, 0x80, 0x1, 0xd393153, 0x7]}, {0x1000, 0x4, 0x4, [0x3f, 0x80000000, 0x80, 0x7fff, 0x6, 0x7fffffff, 0xa01, 0xffffffff]}, {0x1, 0x4, 0x9, [0x45, 0xffffffff, 0x80, 0x7, 0x10001, 0x614, 0x401, 0x5]}]}) 03:49:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10) r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000300)) [ 1217.507588] QAT: failed to copy from user cfg_data. [ 1217.525072] QAT: failed to copy from user cfg_data. 03:49:24 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x2, {"6220c2f4a07608d0237d0b13a9f16bd9"}, 0x9, 0x7, 0x1}}}, 0xa0) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000a00), 0x80000001, 0x305043) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000a40)={0x3, 0xb, 0x4, 0x10, 0x7ff, {0x77359400}, {0x5, 0xc, 0x7, 0x4, 0x81, 0x7f, "2a962e23"}, 0x3f, 0x4, {}, 0x4, 0x0, r2}) r3 = syz_open_dev$media(&(0x7f0000000100), 0xebeb, 0x2800) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140)=[{0x80000000, 0x0}], &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f0000000700)=[{}, {}, {}]}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f00000008c0)={0x4, 0x3, 0x7, 0x8, 0x6, 0x1f, 0x81, 0x3, 0x4, 0xe8, 0x1, "c39aa4d17529c557ef452cfbeb1ed270407ea7ea470d1db407b59184f1e77bc4"}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000840)={{0x80000000, r4, 0x0, [0x74, 0x2]}, {r5, r6, 0x4, [0x1, 0xfffff47a]}, 0x2, [0x8, 0x9]}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000900)={{}, 0x95}) read$char_usb(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) 03:49:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62, "33deadc3"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62, "33deadc3"}}) 03:49:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10) r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000300)) 03:49:24 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x2, {"6220c2f4a07608d0237d0b13a9f16bd9"}, 0x9, 0x7, 0x1}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x2, {"6220c2f4a07608d0237d0b13a9f16bd9"}, 0x9, 0x7, 0x1}}}, 0xa0) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000a00), 0x80000001, 0x305043) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000a40)={0x3, 0xb, 0x4, 0x10, 0x7ff, {0x77359400}, {0x5, 0xc, 0x7, 0x4, 0x81, 0x7f, "2a962e23"}, 0x3f, 0x4, {}, 0x4, 0x0, r2}) r3 = syz_open_dev$media(&(0x7f0000000100), 0xebeb, 0x2800) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140)=[{0x80000000, 0x0}], &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f0000000700)=[{}, {}, {}]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f00000008c0)={0x4, 0x3, 0x7, 0x8, 0x6, 0x1f, 0x81, 0x3, 0x4, 0xe8, 0x1, "c39aa4d17529c557ef452cfbeb1ed270407ea7ea470d1db407b59184f1e77bc4"}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000840)={{0x80000000, r4, 0x0, [0x74, 0x2]}, {r5, r6, 0x4, [0x1, 0xfffff47a]}, 0x2, [0x8, 0x9]}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000900)={{}, 0x95}) read$char_usb(r0, 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xfff, 0x2c0301) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator0\x00'}}, 0x6}) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) [ 1217.620722] QAT: failed to copy from user cfg_data. [ 1217.636949] QAT: Device 6 not found 03:49:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62, "33deadc3"}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62, "33deadc3"}}) (async) 03:49:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10) (async) r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000300)) 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xfff, 0x2c0301) 03:49:24 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x2, {"6220c2f4a07608d0237d0b13a9f16bd9"}, 0x9, 0x7, 0x1}}}, 0xa0) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000a00), 0x80000001, 0x305043) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000a40)={0x3, 0xb, 0x4, 0x10, 0x7ff, {0x77359400}, {0x5, 0xc, 0x7, 0x4, 0x81, 0x7f, "2a962e23"}, 0x3f, 0x4, {}, 0x4, 0x0, r2}) r3 = syz_open_dev$media(&(0x7f0000000100), 0xebeb, 0x2800) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140)=[{0x80000000, 0x0}], &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{}, {0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f0000000700)=[{}, {}, {}]}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f00000008c0)={0x4, 0x3, 0x7, 0x8, 0x6, 0x1f, 0x81, 0x3, 0x4, 0xe8, 0x1, "c39aa4d17529c557ef452cfbeb1ed270407ea7ea470d1db407b59184f1e77bc4"}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000840)={{0x80000000, r4, 0x0, [0x74, 0x2]}, {r5, r6, 0x4, [0x1, 0xfffff47a]}, 0x2, [0x8, 0x9]}) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000900)={{}, 0x95}) read$char_usb(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x2, {"6220c2f4a07608d0237d0b13a9f16bd9"}, 0x9, 0x7, 0x1}}}, 0xa0) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000a00), 0x80000001, 0x305043) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000a40)={0x3, 0xb, 0x4, 0x10, 0x7ff, {0x77359400}, {0x5, 0xc, 0x7, 0x4, 0x81, 0x7f, "2a962e23"}, 0x3f, 0x4, {}, 0x4, 0x0, r2}) (async) syz_open_dev$media(&(0x7f0000000100), 0xebeb, 0x2800) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240), &(0x7f0000000280)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000780)={0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}], 0x5, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{}, {}], 0x3, 0x0, &(0x7f0000000700)=[{}, {}, {}]}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f00000008c0)={0x4, 0x3, 0x7, 0x8, 0x6, 0x1f, 0x81, 0x3, 0x4, 0xe8, 0x1, "c39aa4d17529c557ef452cfbeb1ed270407ea7ea470d1db407b59184f1e77bc4"}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000840)={{0x80000000, r4, 0x0, [0x74, 0x2]}, {r5, r6, 0x4, [0x1, 0xfffff47a]}, 0x2, [0x8, 0x9]}) (async) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000900)={{}, 0x95}) (async) read$char_usb(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) (async) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00e21100"}}) [ 1217.730298] QAT: failed to copy from user cfg_data. 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x60040) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x3, 0x0, 0x258b, 0x5}}, 0x20) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator0\x00'}}, 0x6}) [ 1217.766573] QAT: Device 6 not found 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x60040) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x3, 0x0, 0x258b, 0x5}}, 0x20) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x60040) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x3, 0x0, 0x258b, 0x5}}, 0x20) (async) 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xfff, 0x2c0301) syz_open_dev$video(&(0x7f0000000080), 0xfff, 0x2c0301) (async) 03:49:24 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00e21100"}}) 03:49:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc8e, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, &(0x7f00000000c0), 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x23, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r4, r3]}, 0x80) read$char_usb(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x9) syz_open_dev$video(&(0x7f0000000000), 0xbc6, 0x28c081) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x60040) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x3, 0x0, 0x258b, 0x5}}, 0x20) [ 1217.867963] QAT: failed to copy from user cfg_data. 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00e21100"}}) 03:49:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc8e, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, &(0x7f00000000c0), 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x23, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r4, r3]}, 0x80) (async) read$char_usb(r0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x9) (async) syz_open_dev$video(&(0x7f0000000000), 0xbc6, 0x28c081) 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xec9, 0x7, 0x0, [0x6, 0x6, 0x0, 0x5, 0x7f, 0x5, 0x9, 0x233a085a]}]}) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xd2092540df3f9055, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000040)={{}, 0x80}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1217.901365] QAT: Device 6 not found 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xec9, 0x7, 0x0, [0x6, 0x6, 0x0, 0x5, 0x7f, 0x5, 0x9, 0x233a085a]}]}) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xd2092540df3f9055, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000040)={{}, 0x80}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xec9, 0x7, 0x0, [0x6, 0x6, 0x0, 0x5, 0x7f, 0x5, 0x9, 0x233a085a]}]}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xec9, 0x7, 0x0, [0x6, 0x6, 0x0, 0x5, 0x7f, 0x5, 0x9, 0x233a085a]}]}) (async) [ 1217.955922] QAT: failed to copy from user cfg_data. 03:49:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc8e, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, &(0x7f00000000c0), 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x23, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r4, r3]}, 0x80) read$char_usb(r0, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x9) syz_open_dev$video(&(0x7f0000000000), 0xbc6, 0x28c081) 03:49:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:49:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x625a80e519910190) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x800, 0x109400) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x2000, 0xd6, {0x77359400}, {0x0, 0x2, 0x3, 0x0, 0x6, 0x84, "25d95c1f"}, 0x1f, 0x4, {}, 0xf3, 0x0, r1}) 03:49:24 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xd2092540df3f9055, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000040)={{}, 0x80}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:24 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:49:24 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) 03:49:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x625a80e519910190) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x800, 0x109400) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x2000, 0xd6, {0x77359400}, {0x0, 0x2, 0x3, 0x0, 0x6, 0x84, "25d95c1f"}, 0x1f, 0x4, {}, 0xf3, 0x0, r1}) 03:49:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) write$char_usb(r1, &(0x7f00000001c0)="2ec6ad9a227ca801378b4d6bd40dbf5db856ea1395cdc631038da8a1ebf33697a7f4f3f3a2803f4712d1f87acdcb5b7b415f022135f86e59de9c6293934d017e95a10da3b0db462d4f963146a60e0a72722a4f5b09fe3b56ccc0020359b83df550298ae72023", 0x66) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x1, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 03:49:25 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) 03:49:25 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x6) 03:49:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 03:49:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x625a80e519910190) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 64) r2 = syz_open_dev$video(&(0x7f00000000c0), 0x800, 0x109400) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x2000, 0xd6, {0x77359400}, {0x0, 0x2, 0x3, 0x0, 0x6, 0x84, "25d95c1f"}, 0x1f, 0x4, {}, 0xf3, 0x0, r1}) 03:49:25 executing program 5: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)={{&(0x7f0000000140)={'KERNEL\x00', {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"ce2d4e54756323c524605e2a95557af0be1cbae23ad8ee929ca855b63e8945ab8202e106468d8cb0057e7a7cc3cdc18cbae158b40579ad160511ea0b7b5dcbbe"}, {&(0x7f0000000080)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x100000000}}}}}}}, 0x3}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xc7e2, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x80}) 03:49:25 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) write$char_usb(r1, &(0x7f00000001c0)="2ec6ad9a227ca801378b4d6bd40dbf5db856ea1395cdc631038da8a1ebf33697a7f4f3f3a2803f4712d1f87acdcb5b7b415f022135f86e59de9c6293934d017e95a10da3b0db462d4f963146a60e0a72722a4f5b09fe3b56ccc0020359b83df550298ae72023", 0x66) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x1, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) [ 1218.154247] QAT: failed to copy from user cfg_data. 03:49:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 03:49:25 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x6) 03:49:25 executing program 5: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)={{&(0x7f0000000140)={'KERNEL\x00', {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"ce2d4e54756323c524605e2a95557af0be1cbae23ad8ee929ca855b63e8945ab8202e106468d8cb0057e7a7cc3cdc18cbae158b40579ad160511ea0b7b5dcbbe"}, {&(0x7f0000000080)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x100000000}}}}}}}, 0x3}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xc7e2, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x80}) 03:49:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x6, 0xb, 0x4, 0x1, 0x2, {0x0, 0xea60}, {0x5, 0x1, 0x81, 0x3, 0x7, 0xf9, "b2aad753"}, 0x1f, 0x4, {}, 0xa82, 0x0, r1}) 03:49:25 executing program 0: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)) 03:49:25 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x6) 03:49:25 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x80002) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x800000}) [ 1218.237691] QAT: failed to copy from user cfg_data. 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) write$char_usb(r1, &(0x7f00000001c0)="2ec6ad9a227ca801378b4d6bd40dbf5db856ea1395cdc631038da8a1ebf33697a7f4f3f3a2803f4712d1f87acdcb5b7b415f022135f86e59de9c6293934d017e95a10da3b0db462d4f963146a60e0a72722a4f5b09fe3b56ccc0020359b83df550298ae72023", 0x66) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x1, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 03:49:25 executing program 5: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)={{&(0x7f0000000140)={'KERNEL\x00', {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"ce2d4e54756323c524605e2a95557af0be1cbae23ad8ee929ca855b63e8945ab8202e106468d8cb0057e7a7cc3cdc18cbae158b40579ad160511ea0b7b5dcbbe"}, {&(0x7f0000000080)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x100000000}}}}}}}, 0x3}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xc7e2, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x80}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0xc7e2, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x80}) 03:49:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x6, 0xb, 0x4, 0x1, 0x2, {0x0, 0xea60}, {0x5, 0x1, 0x81, 0x3, 0x7, 0xf9, "b2aad753"}, 0x1f, 0x4, {}, 0xa82, 0x0, r1}) 03:49:25 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:25 executing program 0: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)) 03:49:25 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x80002) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x800000}) 03:49:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x50, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1218.323582] QAT: failed to copy from user cfg_data. 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], &(0x7f0000000040)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x3, 0x7]}, {0x80000000, r1, 0x1, [0x10000, 0x844]}, 0x10000000, [0x9, 0x2]}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x6, 0xb, 0x4, 0x1, 0x2, {0x0, 0xea60}, {0x5, 0x1, 0x81, 0x3, 0x7, 0xf9, "b2aad753"}, 0x1f, 0x4, {}, 0xa82, 0x0, r1}) 03:49:25 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x4) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:25 executing program 0: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)) 03:49:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x50, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:25 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x80002) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0xc, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}, 0x0, 0x4, {}, 0x800000}) 03:49:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x81) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x203ff5f6853b0466}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r6}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0xfff, @private0, 0x7f}, r6}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {r10, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8, 0x7ffe}}, 0x10) read$char_usb(r0, 0x0, 0x0) 03:49:25 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000000), 0x200000000, 0x119400) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x3) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000300)) 03:49:25 executing program 3: syz_open_dev$char_usb(0xc, 0xb4, 0x4) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) [ 1218.414396] QAT: failed to copy from user cfg_data. 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], &(0x7f0000000040)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x3, 0x7]}, {0x80000000, r1, 0x1, [0x10000, 0x844]}, 0x10000000, [0x9, 0x2]}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x3, 0x7]}, {0x80000000, r1, 0x1, [0x10000, 0x844]}, 0x10000000, [0x9, 0x2]}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:25 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x1) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x4, "14001000"}, 0x0, 0x4, {}, 0xff}) 03:49:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x50, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x50, 0x80000) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) 03:49:25 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x1) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x4, "14001000"}, 0x0, 0x4, {}, 0xff}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) (async) syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x1) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x4, "14001000"}, 0x0, 0x4, {}, 0xff}) (async) 03:49:25 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], &(0x7f0000000040)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x3, 0x7]}, {0x80000000, r1, 0x1, [0x10000, 0x844]}, 0x10000000, [0x9, 0x2]}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:25 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0x95c9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000005c0)=0x1) sched_rr_get_interval(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000500)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"85525a9b70542f4b692646ab8762e2ab8ee5c0b2579d78769f910debed0f860153f621cfd55eae125e21b0d2dd0a53fdc92ac63e14341c97493a025895ae5013"}}}}}, {&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x1f}, {&(0x7f0000000280)=@adf_dec={@format={'Dc', '4', 'RingRx\x00'}}}}}}}}}, 0x7}) socket(0xb, 0x2, 0xfffffffe) 03:49:25 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000000), 0x200000000, 0x119400) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x3) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) (async) syz_open_dev$video(&(0x7f0000000000), 0x200000000, 0x119400) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x3) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000300)) (async) [ 1218.476635] QAT: failed to copy from user cfg_data. [ 1218.488202] QAT: failed to copy from user cfg_data. 03:49:25 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x117000) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x4}}, 0x18) r1 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x7fff, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) 03:49:25 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 1218.527101] QAT: failed to copy from user cfg_data. [ 1218.535635] QAT: failed to copy from user cfg_data. 03:49:26 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x117000) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x4}}, 0x18) (async) r1 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x7fff, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) 03:49:26 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x1) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x4, "14001000"}, 0x0, 0x4, {}, 0xff}) 03:49:26 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 03:49:26 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0x95c9, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000005c0)=0x1) sched_rr_get_interval(0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000500)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"85525a9b70542f4b692646ab8762e2ab8ee5c0b2579d78769f910debed0f860153f621cfd55eae125e21b0d2dd0a53fdc92ac63e14341c97493a025895ae5013"}}}}}, {&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x1f}, {&(0x7f0000000280)=@adf_dec={@format={'Dc', '4', 'RingRx\x00'}}}}}}}}}, 0x7}) (async) socket(0xb, 0x2, 0xfffffffe) 03:49:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x81) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x203ff5f6853b0466}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r6}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0xfff, @private0, 0x7f}, r6}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0xfff, @private0, 0x7f}, r6}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {r10, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8, 0x7ffe}}, 0x10) read$char_usb(r0, 0x0, 0x0) 03:49:26 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) (async) r4 = syz_open_dev$video(&(0x7f0000000000), 0x200000000, 0x119400) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) (rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x3) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000300)) 03:49:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 03:49:26 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x117000) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x4}}, 0x18) r1 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x7fff, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) 03:49:26 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 03:49:26 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0x95c9, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000005c0)=0x1) (async) sched_rr_get_interval(0x0, &(0x7f0000000040)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000540)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000500)={{&(0x7f0000000480)={'GENERAL\x00', {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {}, {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"85525a9b70542f4b692646ab8762e2ab8ee5c0b2579d78769f910debed0f860153f621cfd55eae125e21b0d2dd0a53fdc92ac63e14341c97493a025895ae5013"}}}}}, {&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@normal='NumberCyInstances\x00', {0x1f}, {&(0x7f0000000280)=@adf_dec={@format={'Dc', '4', 'RingRx\x00'}}}}}}}}}, 0x7}) (async) socket(0xb, 0x2, 0xfffffffe) 03:49:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) (async) 03:49:26 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7e0091ff91bef8a2a1", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25110000000500370000000000080032000100000008002c000100000008003c000400000008003900ff7f000008002b000000000008000b0001000100"], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x2000c000) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="02a18f944dcbbe70e92fb69cf29f0e0b80534b685ed20b4c8dd3400acff65a2bb3988c3e9fea00a9799d65c9462b6c1114cc0440cd142a60b88f5a1ae8871f4898dcf8d52d7c9bb10d892f0cb9d5664c1186b2fbf91aed00bdcb225dcc2b2a1d2c363f0a2b68e5f2c9f36da105951db901a210affd83c8f5ac874e96d320fbdda80a8774e0e825ed28102ae94fd6c65dd821a04b76e1fee3a7c5eca3eb03265175550ad4bbe8925e63025fbd7f7b680311e990d1aefbac7c51d12c14a506d2", 0xbf) 03:49:26 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x6, 0x200000) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x5f2dd06097f2664f, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x0, 0x0, r0}) 03:49:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 03:49:26 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7e0091ff91bef8a2a1", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25110000000500370000000000080032000100000008002c000100000008003c000400000008003900ff7f000008002b000000000008000b0001000100"], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x2000c000) (async) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="02a18f944dcbbe70e92fb69cf29f0e0b80534b685ed20b4c8dd3400acff65a2bb3988c3e9fea00a9799d65c9462b6c1114cc0440cd142a60b88f5a1ae8871f4898dcf8d52d7c9bb10d892f0cb9d5664c1186b2fbf91aed00bdcb225dcc2b2a1d2c363f0a2b68e5f2c9f36da105951db901a210affd83c8f5ac874e96d320fbdda80a8774e0e825ed28102ae94fd6c65dd821a04b76e1fee3a7c5eca3eb03265175550ad4bbe8925e63025fbd7f7b680311e990d1aefbac7c51d12c14a506d2", 0xbf) [ 1219.469605] QAT: failed to copy from user cfg_data. 03:49:26 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000100), 0x6, 0x200000) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x5f2dd06097f2664f, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x0, 0x0, r0}) [ 1219.535418] QAT: failed to copy from user cfg_data. 03:49:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x81) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x203ff5f6853b0466}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r6}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r6}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0xfff, @private0, 0x7f}, r6}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x106, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r9, &(0x7f0000000500)={0x4, 0x8, 0xfa00, {r10, 0x9}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8, 0x7ffe}}, 0x10) read$char_usb(r0, 0x0, 0x0) 03:49:27 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xb5ed, 0x111102) 03:49:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000180)={0x3, 0xa, 0x4, 0x100, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x80, 0x3, 0x9, 0x7, "66bd3013"}, 0xffff58ff, 0x4, {}, 0xfffffffe, 0x0, r4}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator\x00'}}, 0x80}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x100, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, "33deadc3"}, 0x80, 0x4, {}, 0x0, 0x0, r6}) 03:49:27 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000100), 0x6, 0x200000) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x5f2dd06097f2664f, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x0, 0x0, r0}) 03:49:27 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7e0091ff91bef8a2a1", @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25110000000500370000000000080032000100000008002c000100000008003c000400000008003900ff7f000008002b000000000008000b0001000100"], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x2000c000) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="02a18f944dcbbe70e92fb69cf29f0e0b80534b685ed20b4c8dd3400acff65a2bb3988c3e9fea00a9799d65c9462b6c1114cc0440cd142a60b88f5a1ae8871f4898dcf8d52d7c9bb10d892f0cb9d5664c1186b2fbf91aed00bdcb225dcc2b2a1d2c363f0a2b68e5f2c9f36da105951db901a210affd83c8f5ac874e96d320fbdda80a8774e0e825ed28102ae94fd6c65dd821a04b76e1fee3a7c5eca3eb03265175550ad4bbe8925e63025fbd7f7b680311e990d1aefbac7c51d12c14a506d2", 0xbf) 03:49:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x8000, 0x20, {{0x12, 0x4, 0x2, 0x10, 0x48, 0x66, 0x0, 0xfa, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xda}, {@loopback, 0x3}, {@loopback, 0xfffffffb}]}, @lsrr={0x83, 0xb, 0x3e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x1, [{@private=0xa010100, 0x8}]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc, &(0x7f00000000c0)=""/12, 0x40f00, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x9, 0x1ff}, 0x7c15283e620a4eba, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1]}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000002c0)=0x2210000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000003c0)) 03:49:27 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xb5ed, 0x111102) 03:49:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000180)={0x3, 0xa, 0x4, 0x100, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x80, 0x3, 0x9, 0x7, "66bd3013"}, 0xffff58ff, 0x4, {}, 0xfffffffe, 0x0, r4}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator\x00'}}, 0x80}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x100, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, "33deadc3"}, 0x80, 0x4, {}, 0x0, 0x0, r6}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000180)={0x3, 0xa, 0x4, 0x100, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x80, 0x3, 0x9, 0x7, "66bd3013"}, 0xffff58ff, 0x4, {}, 0xfffffffe, 0x0, r4}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator\x00'}}, 0x80}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x100, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, "33deadc3"}, 0x80, 0x4, {}, 0x0, 0x0, r6}) (async) 03:49:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x8000, 0x20, {{0x12, 0x4, 0x2, 0x10, 0x48, 0x66, 0x0, 0xfa, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xda}, {@loopback, 0x3}, {@loopback, 0xfffffffb}]}, @lsrr={0x83, 0xb, 0x3e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x1, [{@private=0xa010100, 0x8}]}]}}}}}) (async, rerun: 32) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc, &(0x7f00000000c0)=""/12, 0x40f00, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x9, 0x1ff}, 0x7c15283e620a4eba, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1]}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000002c0)=0x2210000) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000003c0)) [ 1220.284332] QAT: failed to copy from user cfg_data. 03:49:27 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000200)={'netpci0\x00'}) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x3f, 0x5, 0x7f, 0x2, 0x0, 0x1f, 0x9, 0xc7, "4ae0daade773715c69932959ff3da480ed3b81a3007332a9cc81850863e6a5c5"}) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x9, 0x3c, 0x40, 0x2f, 0x1, 0x9, 0x6, 0x4, 0x80, 0xff, "07ab644b53b035fa8509d15feeb86d83fbe320fab21bdd29c37f104e13e55a59"}) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 03:49:27 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) 03:49:27 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xb5ed, 0x111102) [ 1220.413088] QAT: failed to copy from user cfg_data. 03:49:28 executing program 1: r0 = getuid() statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), 0x14) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') read$char_usb(r3, 0x0, 0x0) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000180)={0x3, 0xa, 0x4, 0x100, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x80, 0x3, 0x9, 0x7, "66bd3013"}, 0xffff58ff, 0x4, {}, 0xfffffffe, 0x0, r4}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator\x00'}}, 0x80}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x100, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, "33deadc3"}, 0x80, 0x4, {}, 0x0, 0x0, r6}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000180)={0x3, 0xa, 0x4, 0x100, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x80, 0x3, 0x9, 0x7, "66bd3013"}, 0xffff58ff, 0x4, {}, 0xfffffffe, 0x0, r4}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000000c0)={{&(0x7f0000000040)={'Accelerator\x00'}}, 0x80}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x100, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, "33deadc3"}, 0x80, 0x4, {}, 0x0, 0x0, r6}) (async) 03:49:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x8000, 0x20, {{0x12, 0x4, 0x2, 0x10, 0x48, 0x66, 0x0, 0xfa, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xda}, {@loopback, 0x3}, {@loopback, 0xfffffffb}]}, @lsrr={0x83, 0xb, 0x3e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x1, [{@private=0xa010100, 0x8}]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc, &(0x7f00000000c0)=""/12, 0x40f00, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x9, 0x1ff}, 0x7c15283e620a4eba, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1]}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000002c0)=0x2210000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000003c0)) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x8000, 0x20, {{0x12, 0x4, 0x2, 0x10, 0x48, 0x66, 0x0, 0xfa, 0x29, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xda}, {@loopback, 0x3}, {@loopback, 0xfffffffb}]}, @lsrr={0x83, 0xb, 0x3e, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x1, [{@private=0xa010100, 0x8}]}]}}}}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc, &(0x7f00000000c0)=""/12, 0x40f00, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x9, 0x1ff}, 0x7c15283e620a4eba, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000002c0)=0x2210000) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000003c0)) (async) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000200)={'netpci0\x00'}) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000200)={'netpci0\x00'}) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x3f, 0x5, 0x7f, 0x2, 0x0, 0x1f, 0x9, 0xc7, "4ae0daade773715c69932959ff3da480ed3b81a3007332a9cc81850863e6a5c5"}) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x9, 0x3c, 0x40, 0x2f, 0x1, 0x9, 0x6, 0x4, 0x80, 0xff, "07ab644b53b035fa8509d15feeb86d83fbe320fab21bdd29c37f104e13e55a59"}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x9, 0x3c, 0x40, 0x2f, 0x1, 0x9, 0x6, 0x4, 0x80, 0xff, "07ab644b53b035fa8509d15feeb86d83fbe320fab21bdd29c37f104e13e55a59"}) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 03:49:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$pppoe(0x18, 0x1, 0x0) (async) 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000180), 0x9, 0x408680) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000180), 0x9, 0x408680) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) syz_open_dev$video(&(0x7f0000000180), 0x9, 0x408680) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) (async) [ 1221.224643] QAT: failed to copy from user cfg_data. 03:49:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$pppoe(0x18, 0x1, 0x0) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x4, 0x2, 0x4, 0x2000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0100, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x108800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x1ff) 03:49:28 executing program 1: r0 = getuid() (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), 0x14) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x1000) (async) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') read$char_usb(r3, 0x0, 0x0) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000200)={'netpci0\x00'}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x3f, 0x5, 0x7f, 0x2, 0x0, 0x1f, 0x9, 0xc7, "4ae0daade773715c69932959ff3da480ed3b81a3007332a9cc81850863e6a5c5"}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000040)={0x5, 0x9, 0x3c, 0x40, 0x2f, 0x1, 0x9, 0x6, 0x4, 0x80, 0xff, "07ab644b53b035fa8509d15feeb86d83fbe320fab21bdd29c37f104e13e55a59"}) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000180), 0x9, 0x408680) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) 03:49:28 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x4, 0x2, 0x4, 0x2000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0100, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x108800, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x108800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x1ff) 03:49:28 executing program 5: fchownat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xffffffffffffffff, 0x0, 0x1000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:28 executing program 1: r0 = getuid() (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), 0x14) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, r1, 0x1000) (async) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') read$char_usb(r3, 0x0, 0x0) 03:49:28 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_alloc(0x0, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0xd0, 0xa6e1fa3880b8c483, 0x336c, 0xb4e2, {{0x15, 0x4, 0x1, 0x3c, 0x54, 0x68, 0x0, 0x7f, 0x0, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x23, 0x3, [{0x4, 0x4, "a87b"}, {0x7, 0x11, "1d4ca77dfc69abc745f5d354d120b3"}, {0x0, 0x6, "e2a4841f"}, {0x6, 0x2}]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xa, [0x7e, 0x10000, 0x3, 0x6, 0x7, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4, 0x287, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@end, @lsrr={0x83, 0x13, 0x96, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r7 = msgget(0x0, 0x40) msgctl$IPC_RMID(r7, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)={0x3a0, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x44}, {0x800, 0x6, 0x6, 0x9}, {0x8001, 0x0, 0x5, 0x200}, {0x60cf, 0x5, 0x2, 0xc9d}, {0x8, 0x3f, 0x23}, {0x4, 0xc2, 0x3f, 0x101}]}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff3281}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44804) [ 1221.366252] QAT: failed to copy from user cfg_data. 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) 03:49:28 executing program 5: fchownat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xffffffffffffffff, 0x0, 0x1000) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x4, 0x2, 0x4, 0x2000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0100, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x108800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x1ff) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x4, 0x2, 0x4, 0x2000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0100, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x108800, 0x0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) (async) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) (async) mkdirat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x1ff) (async) [ 1221.481912] QAT: failed to copy from user cfg_data. 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$watch_queue(r0, &(0x7f0000000000)=""/77, 0x4d) 03:49:28 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_alloc(0x0, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0xd0, 0xa6e1fa3880b8c483, 0x336c, 0xb4e2, {{0x15, 0x4, 0x1, 0x3c, 0x54, 0x68, 0x0, 0x7f, 0x0, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x23, 0x3, [{0x4, 0x4, "a87b"}, {0x7, 0x11, "1d4ca77dfc69abc745f5d354d120b3"}, {0x0, 0x6, "e2a4841f"}, {0x6, 0x2}]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xa, [0x7e, 0x10000, 0x3, 0x6, 0x7, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4, 0x287, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@end, @lsrr={0x83, 0x13, 0x96, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r7 = msgget(0x0, 0x40) msgctl$IPC_RMID(r7, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)={0x3a0, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x44}, {0x800, 0x6, 0x6, 0x9}, {0x8001, 0x0, 0x5, 0x200}, {0x60cf, 0x5, 0x2, 0xc9d}, {0x8, 0x3f, 0x23}, {0x4, 0xc2, 0x3f, 0x101}]}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff3281}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44804) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) pkey_alloc(0x0, 0x1) (async) pkey_free(r0) (async) pkey_alloc(0x0, 0x2) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0xd0, 0xa6e1fa3880b8c483, 0x336c, 0xb4e2, {{0x15, 0x4, 0x1, 0x3c, 0x54, 0x68, 0x0, 0x7f, 0x0, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x23, 0x3, [{0x4, 0x4, "a87b"}, {0x7, 0x11, "1d4ca77dfc69abc745f5d354d120b3"}, {0x0, 0x6, "e2a4841f"}, {0x6, 0x2}]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xa, [0x7e, 0x10000, 0x3, 0x6, 0x7, 0x0]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4, 0x287, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@end, @lsrr={0x83, 0x13, 0x96, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) msgget(0x0, 0x40) (async) msgctl$IPC_RMID(r7, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)={0x3a0, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x44}, {0x800, 0x6, 0x6, 0x9}, {0x8001, 0x0, 0x5, 0x200}, {0x60cf, 0x5, 0x2, 0xc9d}, {0x8, 0x3f, 0x23}, {0x4, 0xc2, 0x3f, 0x101}]}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff3281}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44804) (async) 03:49:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000800)={0x6, 0x118, 0xfa00, {{0x200, 0x8001, "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", 0x40, 0x1, 0x8, 0x69, 0x1, 0x20, 0x7f}, r7}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x8, "637c670fd9fcd0dddca99fbe9786a5497c2b74062c82233fc0631aaff7ee98f1b1b53b140bd41258d8d872f5ee36f73b887f617d7b19461c83a621590db12e89942eee9a84a6e28e107355825cd81de2f1727f4b677c8e73fc81e28a907d84d2f7e7849ec03abfe37d50360237bdfb9a8962bf42d9851e1ad225b587ea41671f8a92de1a11e3ddf7aff41a23a9e457618d3bc8261bc024612222edc695a4a64cea587eef7735d7d0ad8a9df1c18db45e8d1ca1e14bb987579f04859d38eb012d684363e678740fb2d9ec2f6ca0be0628d579471d3793603b194c8bc4d96155abc67e1963f0412aae838b5900e0ed2b55080fa98723b16fef3c5a4b1b7ab78fe7", 0x40, 0x2, 0x0, 0x3, 0x3f, 0x4, 0x6, 0x1}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r8, 0x1}}, 0x18) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000740)={0x0, 0xa, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x24924924924905c, 0x0, &(0x7f0000000980)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r12, 0x6, [0x1, 0x80]}, {0x80000000, r13, 0x1, [0x0, 0x4]}, 0x1, [0x10000]}) read$char_usb(r0, 0x0, 0x0) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)) [ 1221.571238] QAT: failed to copy from user cfg_data. 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x400000) 03:49:28 executing program 5: fchownat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xffffffffffffffff, 0x0, 0x1000) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$watch_queue(r0, &(0x7f0000000000)=""/77, 0x4d) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) read$watch_queue(r0, &(0x7f0000000000)=""/77, 0x4d) (async) 03:49:28 executing program 0: syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40) (async) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x40) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_alloc(0x0, 0x2) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0xd0, 0xa6e1fa3880b8c483, 0x336c, 0xb4e2, {{0x15, 0x4, 0x1, 0x3c, 0x54, 0x68, 0x0, 0x7f, 0x0, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x23, 0x3, [{0x4, 0x4, "a87b"}, {0x7, 0x11, "1d4ca77dfc69abc745f5d354d120b3"}, {0x0, 0x6, "e2a4841f"}, {0x6, 0x2}]}, @timestamp={0x44, 0x1c, 0xe1, 0x0, 0xa, [0x7e, 0x10000, 0x3, 0x6, 0x7, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4, 0x287, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@end, @lsrr={0x83, 0x13, 0x96, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4, 0x287, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@end, @lsrr={0x83, 0x13, 0x96, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}]}, @end, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r7 = msgget(0x0, 0x40) msgctl$IPC_RMID(r7, 0x0) (async) msgctl$IPC_RMID(r7, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)={0x3a0, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x44}, {0x800, 0x6, 0x6, 0x9}, {0x8001, 0x0, 0x5, 0x200}, {0x60cf, 0x5, 0x2, 0xc9d}, {0x8, 0x3f, 0x23}, {0x4, 0xc2, 0x3f, 0x101}]}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff3281}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44804) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x400000) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x400000) (async) 03:49:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1221.688233] QAT: failed to copy from user cfg_data. [ 1221.701051] QAT: failed to copy from user cfg_data. 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:28 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$watch_queue(r0, &(0x7f0000000000)=""/77, 0x4d) 03:49:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000800)={0x6, 0x118, 0xfa00, {{0x200, 0x8001, "97ecbc4320d889e7ca6723cb8fb2a02831db54ef060d0c750e47eaa06d2cce1ba2bf6c33ce3e6b6b480a06de6f0f3b887d1032e3213ae217308cc16be0e25e5106c7e460c313b376fd841fab1a66be7f7cd04d444ab8504175ed3ed16fa32856b2eb244fc006b718e26f28492df10e089376a71632166e0e5695cc939ac4f71ba34dc3f4ec02c95decfc91d802542d6569cd00566cdef7ded576e38050fe72b3b534b224bd204f8b53e287a197d6841a1cdf3f05a36eb1e8ce2f166657ff40346fbc5217cb607ee0c51baf62b3f900ea9b07a05d8f9d6542a27e5958a96257606257566018287e5fb11512f176ca3d698743eb57dd3e1c320f1544bff9b58f5f", 0x40, 0x1, 0x8, 0x69, 0x1, 0x20, 0x7f}, r7}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x8, "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", 0x40, 0x2, 0x0, 0x3, 0x3f, 0x4, 0x6, 0x1}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r8, 0x1}}, 0x18) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000740)={0x0, 0xa, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x24924924924905c, 0x0, &(0x7f0000000980)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r12, 0x6, [0x1, 0x80]}, {0x80000000, r13, 0x1, [0x0, 0x4]}, 0x1, [0x10000]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r12, 0x6, [0x1, 0x80]}, {0x80000000, r13, 0x1, [0x0, 0x4]}, 0x1, [0x10000]}) read$char_usb(r0, 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x400000) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x400000) (async) 03:49:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:28 executing program 0: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xb6d03, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000080)) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1221.844649] QAT: failed to copy from user cfg_data. 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x200) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:28 executing program 3: pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x3}}, 0x18) r5 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)={{}, 0x1}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x1, 0x48, 0x2, 0x10000, {{0x4b, 0x4, 0x3, 0x29, 0x12c, 0x65, 0x0, 0x0, 0x8, 0x0, @rand_addr=0x64010102, @remote, {[@cipso={0x86, 0x6e, 0x2, [{0x1, 0x11, "7dee93b5f676b03950d9ef3afc5a06"}, {0x7, 0xd, "bb494dd63bf339a29d823f"}, {0x0, 0x12, "11d95ad988430ec896393926ce8d7cda"}, {0x0, 0xf, "52d6951f3d8434cfe0e9f350d9"}, {0x6, 0x11, "74d9e5c2d59df4966c59e4f7a5f5be"}, {0x0, 0x4, "6a14"}, {0x5, 0x6, "897e89af"}, {0x0, 0xe, "9f7c8c4e2d9e6d375bba0d0a"}]}, @timestamp={0x44, 0xc, 0x82, 0x0, 0x8, [0x2d6, 0x4]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x78, [@private=0xa010100, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xa5, 0x1, 0x9, [{@multicast1, 0x2}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xfffff801}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @lsrr={0x83, 0x27, 0x6e, [@remote, @local, @local, @rand_addr=0x64010102, @empty, @multicast2, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x2c, 0x2, [{0x2, 0xf, "c451200bc3d7f5b82d947af977"}, {0x2, 0xc, "bfac0e5fcd7cb24b4c60"}, {0x6, 0xb, "f94778a3bc84abc398"}]}, @timestamp={0x44, 0xc, 0x3d, 0x0, 0x1, [0x7, 0x2]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6c8, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x0, 0x0, 0x401}, {0xfffa, 0x9, 0x12, 0x5}, {0x8, 0x6, 0x1, 0x25a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7356}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x20, 0x81, 0x3, 0x5}, {0x8, 0x1f, 0x7, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f62}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) 03:49:28 executing program 0: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xb6d03, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000080)) 03:49:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x200) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:28 executing program 0: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xb6d03, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xb6d03, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000080)) (async) 03:49:28 executing program 1: syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000800)={0x6, 0x118, 0xfa00, {{0x200, 0x8001, "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", 0x40, 0x1, 0x8, 0x69, 0x1, 0x20, 0x7f}, r7}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x8, "637c670fd9fcd0dddca99fbe9786a5497c2b74062c82233fc0631aaff7ee98f1b1b53b140bd41258d8d872f5ee36f73b887f617d7b19461c83a621590db12e89942eee9a84a6e28e107355825cd81de2f1727f4b677c8e73fc81e28a907d84d2f7e7849ec03abfe37d50360237bdfb9a8962bf42d9851e1ad225b587ea41671f8a92de1a11e3ddf7aff41a23a9e457618d3bc8261bc024612222edc695a4a64cea587eef7735d7d0ad8a9df1c18db45e8d1ca1e14bb987579f04859d38eb012d684363e678740fb2d9ec2f6ca0be0628d579471d3793603b194c8bc4d96155abc67e1963f0412aae838b5900e0ed2b55080fa98723b16fef3c5a4b1b7ab78fe7", 0x40, 0x2, 0x0, 0x3, 0x3f, 0x4, 0x6, 0x1}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r8, 0x1}}, 0x18) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000740)={0x0, 0xa, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x24924924924905c, 0x0, &(0x7f0000000980)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r12, 0x6, [0x1, 0x80]}, {0x80000000, r13, 0x1, [0x0, 0x4]}, 0x1, [0x10000]}) read$char_usb(r0, 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) [ 1222.030659] QAT: failed to copy from user cfg_data. 03:49:28 executing program 3: pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x3}}, 0x18) (async) r5 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)={{}, 0x1}) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x1, 0x48, 0x2, 0x10000, {{0x4b, 0x4, 0x3, 0x29, 0x12c, 0x65, 0x0, 0x0, 0x8, 0x0, @rand_addr=0x64010102, @remote, {[@cipso={0x86, 0x6e, 0x2, [{0x1, 0x11, "7dee93b5f676b03950d9ef3afc5a06"}, {0x7, 0xd, "bb494dd63bf339a29d823f"}, {0x0, 0x12, "11d95ad988430ec896393926ce8d7cda"}, {0x0, 0xf, "52d6951f3d8434cfe0e9f350d9"}, {0x6, 0x11, "74d9e5c2d59df4966c59e4f7a5f5be"}, {0x0, 0x4, "6a14"}, {0x5, 0x6, "897e89af"}, {0x0, 0xe, "9f7c8c4e2d9e6d375bba0d0a"}]}, @timestamp={0x44, 0xc, 0x82, 0x0, 0x8, [0x2d6, 0x4]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x78, [@private=0xa010100, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xa5, 0x1, 0x9, [{@multicast1, 0x2}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xfffff801}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @lsrr={0x83, 0x27, 0x6e, [@remote, @local, @local, @rand_addr=0x64010102, @empty, @multicast2, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x2c, 0x2, [{0x2, 0xf, "c451200bc3d7f5b82d947af977"}, {0x2, 0xc, "bfac0e5fcd7cb24b4c60"}, {0x6, 0xb, "f94778a3bc84abc398"}]}, @timestamp={0x44, 0xc, 0x3d, 0x0, 0x1, [0x7, 0x2]}, @noop]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6c8, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x0, 0x0, 0x401}, {0xfffa, 0x9, 0x12, 0x5}, {0x8, 0x6, 0x1, 0x25a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7356}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x20, 0x81, 0x3, 0x5}, {0x8, 0x1f, 0x7, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f62}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) 03:49:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x200) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:29 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '4', 'CoreAffinity\x00'}, {"c70f1c8280dfe645be2f8b7868035aac333f867fd98fb757a2f51310ea57ff81d771f78f8dd67754abb1c60d2cb1b7cc43983c111e1cdf69e0d86ad47deac291"}, {&(0x7f00000003c0)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8001}, {&(0x7f0000000300)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "bc8fa93234a4bc8f", "92053b6a1ec54332e7d0f1d62b1b1236", "5b1f9f64", "a95c8aceb1c517bf"}, 0x28) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r1, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) [ 1222.061480] QAT: failed to copy from user cfg_data. 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf250e0000000f117f002d1a00040443d40000000000000100010013000000010006000000f805dc03b802dda8234df4e29c41aed0b1f5f3b6fcb6722b83b979472d414ec76ddc1ca349f348863e2d0e80797f24b91eb0306e6bb43d96e4fedcd9e6912551771ff96cf089beb0091b16d70c696161d8b42f89b48875cb2d7e229f82228eb82072ae3379463d6b2ed02e414739c77950ef496a976a43825acef4c3a2fe25fec35b80e681906653d77a2b0a83719e7bf6006ae8de0ea264f92efeb283d827a3d77ca4c0a17d41a09c64331d64bb3116d52c9c452866a1a2d94e0c9575bab5d4d766862e7c83bbd59879c77821e02293b27b8a19dcccd9bad2bd9f9e6ad8bebd06080211000000060201002603021f02c7239366d74951a049b8aa3972a4a4b3b51cfdaaab04c3a17eb04d6398eae98ff8adcbe750b227b7ccd215c9cc1f2a996880bffd9825587bdfb96657a9db501e4392b69e8912460e8bb23ca1211feb4fc88dd89b8c9988887387c25cca80bd50765434c0b8b9f82af85c6a0b20ef736239d3755bace7141e85315dd07d81897368bb20b6fbd9fd2dfc8d3b1b726de9aa2f3cd9d2ee645aecb5ef3fe62a8517561dcc6f12a0b33afaffe040ffd2a7ff17dcbea625c01a610c722fcb4131cb923db436673cac92af792dbfa38bb4eea3cbb6f560acd1224cc97817e93e5c38c0d33e8610f18fd6cd46d029d47aeef5b52f4eb0f55e24cc39921f7cbab082655226f6480cbf4cc2f8e8e292b02bc0a7f32c207a188f97bdbe654afd54d93c06eec75e32bd706f64ebc65d7de2418ebbded9d16051db617fa483b401121113538db6bb044e52e01758274136e3d526788923682d8126242c1aea83ef7f8c4eeace2208ab2d5ad63ea118a2ba06433a72a40a4559f0756f896aed1dae59207e4c722ddb8100b7aa7354f03b287a501804c0b782e8349fdab4f7ae5d6bf8f0590951e88709226af73fdb7ae521dfc9a5db8f336cf5d8d973028bef298895c9749ed47d397b40c8b3783ad3bba5a8117e9dfa626bf67ea10325e39fc297560ece374871bf7a975ed2d0e5a84a5e987aa5af0f3bff480981900acccdb0b808e31c53eee32e0033ce85c7a4b637df1d38f12301b65913adc8f06398248427bb17cd63814238b5f0d2456c9425eb787ad795119e678ed6539e92031766517659ae1a498d9c786fcb2a99a3ef81f90e18d5b5733595809b8f7a69d26b036af2a12f3906115046fc93587075cd63a32e28f231f29d833e0655d85e99df20c9f01d9f2d23029cb711404127964037c03378253fa8e5dbad9b7e99dc02ef33aaa180242b6822034a3986bdb121c38361990c1a0f45581a765fa4af0480c74e01a77eaa49622b0587a1b591936c2c834c9494b6b8e8000e50afd7edb0c897c005187526930811621d8cac797a0053e02dfeb3c97bb8e278ad994d85c22dbc9b978945c300bd052d086f5aaa34cb05cbaef1b8db8b1b6acaa1d426f4e8e7d416e502204f038360b5edc14f595aa0ddc5e428b36f05702e38379862c1f591350d3cd5b7d71056e5dcee9ec8e3745f49e78f26f148a4cf79dc4c6dcdeff7d3350efeb4be9b3a07992cdd8c5bdb3c61ba4e951b1d61d62d3231cb5f8c2a152eda1861f70865f81fbafbb6fc76c53d49603c9dac31ac5b0cfcd3fd09eca1c0cc1af539d2448c78cd5ea1e0fced5fb0342a316a8d76a69db58c8b30cb5fabeacc0c4773e0265b04de6760c5a4b97beda5996a0808ebb81ded6d715e7716251afe5a4a32a5b413022b15db905166816104b8d2e880698e2a53c0934b522b872e72aeb04b26ef0dd3cda06981d00345c59ea7a1bc7752ea9e8ff07222e148ceacbfba2f5443ba2d795f99a446e29dd96d23bb90bb8e149fecfee5ccac6b62537f3e409f5d3b3682a74ee2eeb2cff73591db3a806cd54f5c861f91e424f72058ee412df9a098090e9b92b2a7dd803c53b79b896dee1becb0be3bbef3408b554c3ed4863f765032ebc4586f6ae7bb32d196aa53c690dccf9d76968749d20a9a09c855b0b2b3f75b4bf5e9a87543c8348545b04e140351a8faffae62de3c6f7656311c3795230bbcb0adaf05d287c424cf20b730af769cd2574da161a5671b7c1814ccc5635a26a819db1f8a25829fb93ebc5b351a7dabcbf4bbe707c3770eea42845038637369a595f64d570accd210dda8f1f60f4a5840fe522be716c8258007c68deda9493a219c4cca947713d872db3bd84306c3e9f973157a6eea531dd04da104e3c0a831b4a7a8fd60035858e4dd53d21e6d9e1105b13a89c690870054ba624e76d209b1984f1a8c4d9a537fa15423f30cdbea5973942a065d547b0375243b8cb26f6f0e6bf0331ff1abb490e4afec1b9a6a6729c0385cf290a6034a7d2762ccb78f9b48b3dff35c7375e89aed0f69113d40d8a540ff1a6ec5f5e310b72b587abf4cc8c2ece20299db406b984ab3b8ec6bcdb0416c93dedfe0d03213ee3afdfbcf92a77e01cb77089d17a1dee0ba617509620f8bd30325d8f3872e6e417a0ad6506eedc23844c11a88e7bf646e9b77ae82a2f0ea0f424a83d888d62c7dfaaab4386af070b344dcba8cacba82a06dad5ff7f6b234f23e89ba3bf3ef2afe8dda952376ac78fcfb9f2b55fe3bba9f31515ad7cb4112bfdffa6891ab5584e0124f028369948d1ed87fdaf247618a451a580af032495c9b37de0aff707b9c4d4d14dd23601fa586ecf4c3aaa33618dde247f61c6dfd83ad57ee19ec9d1617e364ee2dbbf8a69eab67863ee04375fa7f0f029d4c2365eaa539ff8541986d08f3db50960bded8e1b3db91cc15a2751f646fc7e2e7ad68b472ab1ec08c1bcbc0e489883e2be11de32d31ec4d4ac88c64e585e551c1606e761c7862ff5170213ce7a80f1127bd5a6ad6c8eccd4d365063f3862a58ea54c095bd37f324f9c55636bb9fb8af43a6aead9bbdf14f56604cfbfb9eb2da64af06c2c801e63e5ff4c8379ab53a72c2521c5b4ece5e14dfbd93a868bae80fb0a021786cb7e3a6efcd0d26fd23828abd4a34e6a7b62c52735d7e656289044512cdc2d48c710466f1bb6de1920ba746b4396d6bf8e80273821248ee78892658e4e64918199c6762adfec106657fe72ab7c59fb22b56554f1d45f6faf437370c9b5a0aab50e5f14cce6743cab5e15d786f56d5fe3abfc64d1f94180f5d16cf5c72f6374b76dee1ef2091a5eb439ffb795257bcd4a5a6cb106b41abb070d1a522a9930bdd1b89237df44d130a8b48529de15da921560fd4d574390b0f4b51ba4c51ff629a69f037b2c33047078e4c01eaa5b316ad78bfd1ce64645da1e9748b237cf4e71b40799cd22088743b35f999826c0b2d088e3f09845601d2a8f2fc2a44d5d2ddef5f73a6529c0e2cd4237291397e9d6359bc2ed16b8daf317bc275d2042dae354428f13904da498afb600c3e3db0023e7619692b9013ac3d0e4f3f6a9e3c666e60a982a23e67713c467b521e49ce915f4614b8c8bd61e9b86038b7d9bff6f8d75e9126bee6fb73c9d70d4439ba762fe82884cfc0e3942ff288e40eec4dabb8b3703519c9c5bd9b31655c71f4f2bd929bbe386aa18c9256a982ce8b9517e750db6a2b93c0b7ae82588e145efe601b4f32b645a1c704c06a4893198de59fc146484e5b5695156ee242feeb9ce8c52a2ae11675fbbc4d543950ab77552fe9980e68895897805de93025412a71b2b7049ad7154c2cc7e69badec59c01b4b5be2da814981f03e5bf4773eba51010e52022f3cb4b84c41f489ec71205a4dcb7c8e3f332091af53ca31e4e5ed1b7a2516aadb5bd0021a418f652644869912e7a2ecb6c50677ffa78b84dbe4d8c38ab22df058c1bc2f089781fcfa1aa4016462ceeaf009cbfdf75fb78a6f10b684ba41970a2bde7e15bd78324479d92c60118a4b873904749a8835b29f021185948c54a0871824ac59388d4bd80689a9ef83cad9d907aab45b9fcd4f8b535d0f01b6b54cdc860206c081e3ddfca57d4dc54b6b9abb25fb829c36ee966b0435fd74770655f69644820d21a3b4aa86f19f15baf95abb627558f457eadddefa24944a72cf814054e20d2f24a7ec9f94e09513cf945c4b0f78f39e70a9bb34aeb777a113b82cb88bfcd85956c6b39400878a0b0b4e5f5264c9a6a4f0fe0425d0f4ff6d5c38712fa4ecace0627db82f8e85cf61a69da10a92f69c4a9eec6217d9617a80339454ad19bf53458084fe8d5784d6d4eece8700ce482130d65b339028cf3d17929ee16c4d4ac5facf63ed66bcead22b56bf6f453f7007704ec2527bcf7539399e4f3a4dc5af1ddec518485fdd1060c5ff2b9006f579cd2ffb76f4bd144c05fc0dcd986a384dbf6c235c2f3944b395c6db75ac44b4e5942d7e68de50c67c8a91ff06e2caa34e7f515d1a83c65e8d1a0b61c5b20ea9077a9cd7e7604fdcec4e110aacb6ec5621aec396e47d34887df21fe08ab6d11cbe0ea1f0db556ef823f5f41130afab7dc6bd9466746a267c41d10586b2797200da572eee6b3495d6ff7226f3d1798a347a3fa2613d523e757c6b559c45d07f972e454360c067e854d0b041145ea23ce2a743c91185880f04332296cb8f772e2f63404484dc7876cb11d6d8e241d0b63d82016d72cae42001482a8be30e2c20a06ddb754d9a95d14ca9064d506c6a4aa1107221b1de2779c0550e4c20413bf013cc261d86519d2443b5d4ea772d1be9c8b2a8d6c67d72efd8b94d6a5edcb78874044ab7ccdae69e4afa375008737fd82332fa51a5b0ad5729f3dd9c1b4b8e1cce18e807860fb986d7e321a65f014cca325560b22923bf67d985dbd1dbe386bd970b7c4e90e66fd091977fa9d52c673cd4237e9085cdd8fbec45e94160acebd5a7ff63f383fce06f5b7ab6480cdca80fb683e879d1a316bb8676152c1f4e8cdb008c6f978d3e1c4d6209c7de241e862462a55e69eb4d5ffbc9eae380d570aab2b4d546b372cdba36c77cd4354ef747032b07bd960a377079fd561de2274294357fe327f16b76efb51401b586c3543dd10d4d4e3ef205c923571b0bacebf277fc413d5a110e13f601da3bd542e074ee55b06611a7a184def5a91a89c3b9fe2dea31e9e37e32fa0e9abe16d1e0083f4905d239fe1a1bb941a2891d258e0f78b8bf482aa34914f82c7ccd632c7ceb569954cbecf7ae20cf6f969637a920d1ef074244ff855c281de0d4b4de81e89e744ebe0b57789faabf20b384275e5a1e81711c226850fdf8631e9e7777d7e84743768f232650c10d06c23efc7685170dbeea5217311fbf6032f3f2a7d4881fd9d63be3fdae50057b0a73a4ca5528a769dbefa2e270474e4541bb581fbedef5b1851c2778716aac27ddf3367898815be8c86948de8335ac023fcc47796f7c11b3a0ccc8b0be86882fbeb46531805752cb93d4d5ff5291aeff59ee1ef4085c200b8d2e5aa484066b979623fa34fdd1a0d158a31db9f0aa96831afaaa077ff26b058ab46a6c33565549161a0fe3e8a1b4ee345fea73aeaf4cb4b08b8d4c8f6a76fa79c259cfbb4c54283c72edd2dcaf4cbd2746ac20f2097dffbef4b24c6b22204dedd8d0f4ecd64bda9b0db98d0148e0c556fdc2c3550f447a915e6aadbc7767ce9e5a944e1dbaf6aea6bb48925414f334d65f44a80c2ed7d1c78c9a221e1ce51959891ca877e349e21f99cc7882a563035f94d3ee79fce0eceadb043b49fefed4d118c4c56100cc1c1d3ca89d08003fa19d5b96d8dc65eda8074c4fb02fe08e3790d820ccc6fc074f19fa53be8e9c9c60407ccc551f5513c74b0b176ff95e7b7051b8367b5ebc7cfb5e55b708d8883291b53fe32fea37793851cdea7609322098195cce257686b5cdf493f800246219ae99bf344e9325c1cc39cc2f10996f65092c056c37c1eda1527ed4e2a8583c55697276049729cd5b681e3d4c29a71e90c1ab7cf713329aaa02ddb39dccd52fdb1e7ad70abad76b0846e836cbcf5fe2511f0f5bcffcc2702afdbb34e787d34a87df865da2bff266ceefda2388acbed1ff49cd2a2b309fba4fa6405e23d2cb3eeed5219ccd1c2dd40c67c3f44dabfa6b44d8511e9f2b6718a7a00c9e602c9aa41d8045ed3a2c155ef9303bbcb41f75f14882172c7eea779d73f46b4649c53647ee4d21e3ef52ec855d3a420ba12746ad76729c24797ba525d11e3aefd56d0072027f002a010782720703010200000008021100000085000000000800000100000008050802110000000500000001ffffffffffff000000000108021100000005000000040802110000000100000001ffffffffffff0010000004ffffffffffff0100000004ffffffffffff050000000108021100000005000000824c40091304000000080211000001ff01000008021100000000000000070000000400080211000001ff03000001080211000000fdffffff04ffffffffffff00000080000802110000010300000000060101010101010006010101010101822500030107000000ffffffffffff0600000007000000070000000105080211000001f40200003793000461a3b06bf1dab248b3b777a677562b67adf19d83eccc3aa3878d7db8e41f97c138bf80bfd00a07b4b9ab6926fbbf96de3145f940f5a510a36564a94e6ee6fe20672be1f9187c9a2ebeb4fbe7c274300c020899a5d834a5d0f081031922ba7e8f128202f4a69a790b1f271e5a5a6cc6c48916ba86a901188703915c7b322d7dabacec406fbc52d3be8eb0741b86ab9d03007206030303030303840f000100080211000000cdc10000100017c205f987e09704e26b7f8549cff767314e655c051695936a3096fa07f5b8527a8ce93f709e5ecffbff8fabf9ff5749a1407956f653fa2b4b83913015eb8f593cc6baf7ece573d53103d96f4b46d6aa1b1f7c567ec2f436ddecf8f7bc96da1a1f8ef8f4bdf502ca7839c423bbb28a403297ef5cf06aad2c83d945dba6754dbf5cafb7d98b18685a426d942bc791fe7591a14335cc1f32ac9f73755f4c31e9ea11a9f372af58c1ad5716d59bd5259e592695a77710c83744f095c30137db663fab8829b80000"], 0x1398}}, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xee01) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) (async) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) 03:49:29 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '4', 'CoreAffinity\x00'}, {"c70f1c8280dfe645be2f8b7868035aac333f867fd98fb757a2f51310ea57ff81d771f78f8dd67754abb1c60d2cb1b7cc43983c111e1cdf69e0d86ad47deac291"}, {&(0x7f00000003c0)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8001}, {&(0x7f0000000300)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "bc8fa93234a4bc8f", "92053b6a1ec54332e7d0f1d62b1b1236", "5b1f9f64", "a95c8aceb1c517bf"}, 0x28) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r1, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) [ 1222.229894] QAT: failed to copy from user cfg_data. 03:49:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 03:49:29 executing program 3: pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x3}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0x3}}, 0x18) r5 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)={{}, 0x1}) syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x1, 0x48, 0x2, 0x10000, {{0x4b, 0x4, 0x3, 0x29, 0x12c, 0x65, 0x0, 0x0, 0x8, 0x0, @rand_addr=0x64010102, @remote, {[@cipso={0x86, 0x6e, 0x2, [{0x1, 0x11, "7dee93b5f676b03950d9ef3afc5a06"}, {0x7, 0xd, "bb494dd63bf339a29d823f"}, {0x0, 0x12, "11d95ad988430ec896393926ce8d7cda"}, {0x0, 0xf, "52d6951f3d8434cfe0e9f350d9"}, {0x6, 0x11, "74d9e5c2d59df4966c59e4f7a5f5be"}, {0x0, 0x4, "6a14"}, {0x5, 0x6, "897e89af"}, {0x0, 0xe, "9f7c8c4e2d9e6d375bba0d0a"}]}, @timestamp={0x44, 0xc, 0x82, 0x0, 0x8, [0x2d6, 0x4]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x78, [@private=0xa010100, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xa5, 0x1, 0x9, [{@multicast1, 0x2}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0xfffff801}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @lsrr={0x83, 0x27, 0x6e, [@remote, @local, @local, @rand_addr=0x64010102, @empty, @multicast2, @broadcast, @empty, @multicast2]}, @cipso={0x86, 0x2c, 0x2, [{0x2, 0xf, "c451200bc3d7f5b82d947af977"}, {0x2, 0xc, "bfac0e5fcd7cb24b4c60"}, {0x6, 0xb, "f94778a3bc84abc398"}]}, @timestamp={0x44, 0xc, 0x3d, 0x0, 0x1, [0x7, 0x2]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6c8, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x0, 0x0, 0x401}, {0xfffa, 0x9, 0x12, 0x5}, {0x8, 0x6, 0x1, 0x25a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7356}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x20, 0x81, 0x3, 0x5}, {0x8, 0x1f, 0x7, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f62}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x6c8, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x0, 0x0, 0x401}, {0xfffa, 0x9, 0x12, 0x5}, {0x8, 0x6, 0x1, 0x25a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7356}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x20, 0x81, 0x3, 0x5}, {0x8, 0x1f, 0x7, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f62}}}]}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) 03:49:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xee01) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x8, 0x20, {0x77359400}, {0x4, 0x8, 0x81, 0x81, 0x3f, 0x9, "8445f104"}, 0x2, 0x4, {}, 0x5}) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/218) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:29 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) [ 1222.330406] QAT: failed to copy from user cfg_data. 03:49:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x8, 0x20, {0x77359400}, {0x4, 0x8, 0x81, 0x81, 0x3f, 0x9, "8445f104"}, 0x2, 0x4, {}, 0x5}) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/218) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x8, 0x20, {0x77359400}, {0x4, 0x8, 0x81, 0x81, 0x3f, 0x9, "8445f104"}, 0x2, 0x4, {}, 0x5}) (async) read$char_usb(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/218) (async) 03:49:29 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={{&(0x7f00000001c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '4', 'CoreAffinity\x00'}, {"c70f1c8280dfe645be2f8b7868035aac333f867fd98fb757a2f51310ea57ff81d771f78f8dd67754abb1c60d2cb1b7cc43983c111e1cdf69e0d86ad47deac291"}, {&(0x7f00000003c0)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8001}, {&(0x7f0000000300)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}}) (async) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "bc8fa93234a4bc8f", "92053b6a1ec54332e7d0f1d62b1b1236", "5b1f9f64", "a95c8aceb1c517bf"}, 0x28) (async, rerun: 64) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r1, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) 03:49:29 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) (async) 03:49:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xee01) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:29 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x8, 0x20, {0x77359400}, {0x4, 0x8, 0x81, 0x81, 0x3f, 0x9, "8445f104"}, 0x2, 0x4, {}, 0x5}) (async) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/218) 03:49:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 03:49:29 executing program 0: pipe2$watch_queue(&(0x7f00000005c0), 0x80) r0 = syz_open_dev$video(&(0x7f0000000800), 0x6, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{}, {}], 0x6, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}]}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000003c0)={{&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000040)=@adf_dec={@format={'Dc', '2', 'BankNumber\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"0aa367ce6fccaafa5105d5bce3c75c74460803f75de5cfe1509f21d2c6c720019882319ab3d002b0616424a6e2bff3100eab97252e1a134cb8c3a2a106f59c0b"}, {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x14db}, {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"c8ceb9c05be495f16747bff5fea204c08f9547e46c6dc2fd8a47adebf0f53007471d4e43b29614b8c26d3d668682f83c50d31cb9924efa559ef7eda5d70a59ec"}}}}}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '4', 'BankNumber\x00'}, {0x5}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}, 0x7f}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f00000007c0)={{}, 0x40}) write$char_usb(r3, &(0x7f0000000580)="b1fe6bae0233c57d8bf078ee656d2065ab8a706c0a651662370c714a512318ff4d442e", 0x23) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000bc0)={0x582, 0x8, 0x4, 0x8, 0xfffffffe, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x53, 0x1, 0x3, "a2c90081"}, 0x7, 0x4, {}, 0x8, 0x0, r5}) 03:49:29 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x4, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}]}) [ 1222.492338] QAT: failed to copy from user cfg_data. [ 1222.510396] QAT: failed to copy from user cfg_data. 03:49:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000540)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x805) r3 = syz_open_dev$video(&(0x7f0000000800), 0x9, 0x240e80) read$char_usb(r3, 0x0, 0x0) [ 1222.538973] QAT: failed to copy from user cfg_data. [ 1222.557447] QAT: failed to copy from user cfg_data. 03:49:29 executing program 0: pipe2$watch_queue(&(0x7f00000005c0), 0x80) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x6, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{}, {}], 0x6, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}]}) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000003c0)={{&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000040)=@adf_dec={@format={'Dc', '2', 'BankNumber\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"0aa367ce6fccaafa5105d5bce3c75c74460803f75de5cfe1509f21d2c6c720019882319ab3d002b0616424a6e2bff3100eab97252e1a134cb8c3a2a106f59c0b"}, {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x14db}, {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"c8ceb9c05be495f16747bff5fea204c08f9547e46c6dc2fd8a47adebf0f53007471d4e43b29614b8c26d3d668682f83c50d31cb9924efa559ef7eda5d70a59ec"}}}}}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '4', 'BankNumber\x00'}, {0x5}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}, 0x7f}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f00000007c0)={{}, 0x40}) (async) write$char_usb(r3, &(0x7f0000000580)="b1fe6bae0233c57d8bf078ee656d2065ab8a706c0a651662370c714a512318ff4d442e", 0x23) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000bc0)={0x582, 0x8, 0x4, 0x8, 0xfffffffe, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x53, 0x1, 0x3, "a2c90081"}, 0x7, 0x4, {}, 0x8, 0x0, r5}) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (rerun: 64) [ 1222.584648] QAT: failed to copy from user cfg_data. [ 1222.596901] QAT: failed to copy from user cfg_data. [ 1222.609198] QAT: failed to copy from user cfg_data. [ 1222.636320] QAT: failed to copy from user cfg_data. [ 1222.660306] QAT: failed to copy from user cfg_data. [ 1222.667008] QAT: failed to copy from user cfg_data. [ 1222.673692] QAT: failed to copy from user cfg_data. [ 1222.678979] QAT: failed to copy from user cfg_data. [ 1222.693298] QAT: failed to copy from user cfg_data. [ 1222.698345] QAT: failed to copy from user cfg_data. [ 1222.703510] QAT: failed to copy from user cfg_data. [ 1222.708853] QAT: failed to copy from user cfg_data. [ 1222.713993] QAT: failed to copy from user cfg_data. [ 1222.719017] QAT: failed to copy from user cfg_data. [ 1222.724142] QAT: failed to copy from user cfg_data. [ 1222.729168] QAT: failed to copy from user cfg_data. [ 1222.734254] QAT: failed to copy from user cfg_data. [ 1222.739277] QAT: failed to copy from user cfg_data. [ 1222.744701] QAT: failed to copy from user cfg_data. [ 1222.749730] QAT: failed to copy from user cfg_data. [ 1222.754837] QAT: failed to copy from user cfg_data. [ 1222.759864] QAT: failed to copy from user cfg_data. [ 1222.765588] QAT: failed to copy from user cfg_data. [ 1222.770632] QAT: failed to copy from user cfg_data. [ 1222.775770] QAT: failed to copy from user cfg_data. [ 1222.780803] QAT: failed to copy from user cfg_data. [ 1222.785947] QAT: failed to copy from user cfg_data. [ 1222.790981] QAT: failed to copy from user cfg_data. [ 1222.796072] QAT: failed to copy from user cfg_data. [ 1222.801102] QAT: failed to copy from user cfg_data. [ 1222.806199] QAT: failed to copy from user cfg_data. [ 1222.811237] QAT: failed to copy from user cfg_data. [ 1222.816336] QAT: failed to copy from user cfg_data. [ 1222.821367] QAT: failed to copy from user cfg_data. [ 1222.826630] QAT: failed to copy from user cfg_data. [ 1222.831742] QAT: failed to copy from user cfg_data. [ 1222.836774] QAT: failed to copy from user cfg_data. [ 1222.841944] QAT: failed to copy from user cfg_data. [ 1222.846976] QAT: failed to copy from user cfg_data. [ 1222.852522] QAT: failed to copy from user cfg_data. [ 1222.857561] QAT: failed to copy from user cfg_data. [ 1222.862702] QAT: failed to copy from user cfg_data. [ 1222.867728] QAT: failed to copy from user cfg_data. [ 1222.872817] QAT: failed to copy from user cfg_data. [ 1222.877842] QAT: failed to copy from user cfg_data. [ 1222.882922] QAT: failed to copy from user cfg_data. [ 1222.887950] QAT: failed to copy from user cfg_data. [ 1222.893655] QAT: failed to copy from user cfg_data. [ 1222.898684] QAT: failed to copy from user cfg_data. [ 1222.903762] QAT: failed to copy from user cfg_data. [ 1222.908787] QAT: failed to copy from user cfg_data. [ 1222.913869] QAT: failed to copy from user cfg_data. [ 1222.918900] QAT: failed to copy from user cfg_data. [ 1222.923987] QAT: failed to copy from user cfg_data. [ 1222.929013] QAT: failed to copy from user cfg_data. [ 1222.934157] QAT: failed to copy from user cfg_data. [ 1222.939193] QAT: failed to copy from user cfg_data. [ 1222.944283] QAT: failed to copy from user cfg_data. [ 1222.949309] QAT: failed to copy from user cfg_data. [ 1222.954393] QAT: failed to copy from user cfg_data. 03:49:29 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"b522517dfab55acae9158470c3deacebf437bd113d56b5b64e266798a02c4b84eda3949073ed4bd288277c6588ad46384243fadbbbdfcc9aab04be39d3ba45cf"}, {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000180)=@adf_dec={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x3}}}}}}}}}, 0x8}) 03:49:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x191000) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4268, 0x2, 0x4, 0x1, 0xfd5, {0x77359400}, {0x5, 0x2, 0x80, 0x2, 0xe5, 0x80, "3510b9c0"}, 0x80, 0x4, {}, 0x38ed}) 03:49:29 executing program 2: mq_unlink(&(0x7f00000000c0)='-/@,\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0x3, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) (async) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000540)) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x805) (async) r3 = syz_open_dev$video(&(0x7f0000000800), 0x9, 0x240e80) read$char_usb(r3, 0x0, 0x0) 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x400000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x90280, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/143, 0x8f, 0x0, &(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001280)=""/146) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x9, 0x1, 0x0, '\x00\x00\x00\b'}, 0x0, 0x4, {}, 0x0, 0x0, r4}) 03:49:29 executing program 0: pipe2$watch_queue(&(0x7f00000005c0), 0x80) syz_open_dev$video(&(0x7f0000000800), 0x6, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x6, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000006c0)=[{}, {}], 0x6, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000a80)=[{}, {}, {}, {}]}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000003c0)={{&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000040)=@adf_dec={@format={'Dc', '2', 'BankNumber\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"0aa367ce6fccaafa5105d5bce3c75c74460803f75de5cfe1509f21d2c6c720019882319ab3d002b0616424a6e2bff3100eab97252e1a134cb8c3a2a106f59c0b"}, {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x14db}, {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"c8ceb9c05be495f16747bff5fea204c08f9547e46c6dc2fd8a47adebf0f53007471d4e43b29614b8c26d3d668682f83c50d31cb9924efa559ef7eda5d70a59ec"}}}}}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '4', 'BankNumber\x00'}, {0x5}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}, 0x7f}) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000003c0)={{&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000040)=@adf_dec={@format={'Dc', '2', 'BankNumber\x00'}, {0x6}, {&(0x7f00000004c0)=@adf_str={@format={'Dc', '3', 'RingAsymTx\x00'}, {"0aa367ce6fccaafa5105d5bce3c75c74460803f75de5cfe1509f21d2c6c720019882319ab3d002b0616424a6e2bff3100eab97252e1a134cb8c3a2a106f59c0b"}, {&(0x7f0000000400)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x14db}, {&(0x7f0000000600)=@adf_str={@normal='NumberDcInstances\x00', {"c8ceb9c05be495f16747bff5fea204c08f9547e46c6dc2fd8a47adebf0f53007471d4e43b29614b8c26d3d668682f83c50d31cb9924efa559ef7eda5d70a59ec"}}}}}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '4', 'BankNumber\x00'}, {0x5}, {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x4}}}}}}}}}, 0x7f}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f00000007c0)={{}, 0x40}) write$char_usb(r3, &(0x7f0000000580)="b1fe6bae0233c57d8bf078ee656d2065ab8a706c0a651662370c714a512318ff4d442e", 0x23) (async) write$char_usb(r3, &(0x7f0000000580)="b1fe6bae0233c57d8bf078ee656d2065ab8a706c0a651662370c714a512318ff4d442e", 0x23) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000bc0)={0x582, 0x8, 0x4, 0x8, 0xfffffffe, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x53, 0x1, 0x3, "a2c90081"}, 0x7, 0x4, {}, 0x8, 0x0, r5}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000bc0)={0x582, 0x8, 0x4, 0x8, 0xfffffffe, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x53, 0x1, 0x3, "a2c90081"}, 0x7, 0x4, {}, 0x8, 0x0, r5}) [ 1222.959420] QAT: failed to copy from user cfg_data. 03:49:29 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x400000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x90280, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/143, 0x8f, 0x0, &(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001280)=""/146) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x9, 0x1, 0x0, '\x00\x00\x00\b'}, 0x0, 0x4, {}, 0x0, 0x0, r4}) 03:49:30 executing program 2: mq_unlink(&(0x7f00000000c0)='-/@,\x00') (async) mq_unlink(&(0x7f00000000c0)='-/@,\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x400) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0x3, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:30 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"b522517dfab55acae9158470c3deacebf437bd113d56b5b64e266798a02c4b84eda3949073ed4bd288277c6588ad46384243fadbbbdfcc9aab04be39d3ba45cf"}, {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000180)=@adf_dec={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x3}}}}}}}}}, 0x8}) [ 1223.050889] QAT: failed to copy from user cfg_data. 03:49:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x191000) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4268, 0x2, 0x4, 0x1, 0xfd5, {0x77359400}, {0x5, 0x2, 0x80, 0x2, 0xe5, 0x80, "3510b9c0"}, 0x80, 0x4, {}, 0x38ed}) 03:49:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000540)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x805) r3 = syz_open_dev$video(&(0x7f0000000800), 0x9, 0x240e80) read$char_usb(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x34}}, 0x0) (async) gettid() (async) sched_rr_get_interval(r2, &(0x7f0000000540)) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x805) (async) syz_open_dev$video(&(0x7f0000000800), 0x9, 0x240e80) (async) read$char_usb(r3, 0x0, 0x0) (async) 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x280) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x400000) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) (async) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x90280, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/143, 0x8f, 0x0, &(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) shmctl$SHM_LOCK(r1, 0xb) (async) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001280)=""/146) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x9, 0x1, 0x0, '\x00\x00\x00\b'}, 0x0, 0x4, {}, 0x0, 0x0, r4}) 03:49:30 executing program 2: mq_unlink(&(0x7f00000000c0)='-/@,\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x400) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0x3, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000400)={0x0, 0x3, 0x4, 0xe000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:30 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"b522517dfab55acae9158470c3deacebf437bd113d56b5b64e266798a02c4b84eda3949073ed4bd288277c6588ad46384243fadbbbdfcc9aab04be39d3ba45cf"}, {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000180)=@adf_dec={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x3}}}}}}}}}, 0x8}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"b522517dfab55acae9158470c3deacebf437bd113d56b5b64e266798a02c4b84eda3949073ed4bd288277c6588ad46384243fadbbbdfcc9aab04be39d3ba45cf"}, {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000180)=@adf_dec={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x3}}}}}}}}}, 0x8}) (async) [ 1223.150844] QAT: failed to copy from user cfg_data. 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x280) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:30 executing program 1: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="c56b6d7e08afaa516c8041b0e62a7416", 0x10) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}, 0x30) read$char_usb(r0, 0x0, 0x0) 03:49:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xff7f, 0x0, 0x7, 0x3f}, 0x8) r2 = msgget(0x3, 0x104) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f0000000300)=@adf_str={@normal='NumberDcInstances\x00', {"3a1ea75ae85ae2b7cd033577185b7523edfa2c51521e133fa83d3f63969c97b33ca98f19332ce88f35766b2a47bf8b05c6f2877a2ca5c1951e9c29d1e717e81c"}, {&(0x7f0000000240)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"2b6a50366a2acd400e76f67146953414822949d6bbbc326d9b860f7e935b3fb32cd5baee679e512d90266e002faec0d7cad61d3d5a452fcc745af9e80e5af808"}}}}}, {&(0x7f0000000140)={'GENERAL\x00', {&(0x7f00000003c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"02d2740d31ce794b3ef73ca5de8f22d0a411ab2d3a77c1abfa57c75de71babfea8b4a4ab92c00466d607042ab8d7acd5d3e4904b9314d29344400b4ba88f4858"}}}}}}}, 0x81}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x884) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/94) [ 1223.252713] QAT: failed to copy from user cfg_data. 03:49:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x191000) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000000)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x4268, 0x2, 0x4, 0x1, 0xfd5, {0x77359400}, {0x5, 0x2, 0x80, 0x2, 0xe5, 0x80, "3510b9c0"}, 0x80, 0x4, {}, 0x38ed}) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, "0100"}, 0xffffffff, 0x4, {}, 0x369, 0x0, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x3, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250e00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x27c8}, 0x1, 0x0, 0x0, 0x8001}, 0x8850) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) mkdirat$cgroup(r4, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) readlinkat(r7, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/20, 0x14) [ 1223.272988] QAT: failed to copy from user cfg_data. 03:49:30 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x2000e1, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={{}, 0x4}) 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffffc, 0x280) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xff7f, 0x0, 0x7, 0x3f}, 0x8) (async, rerun: 64) r2 = msgget(0x3, 0x104) (async, rerun: 64) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f0000000300)=@adf_str={@normal='NumberDcInstances\x00', {"3a1ea75ae85ae2b7cd033577185b7523edfa2c51521e133fa83d3f63969c97b33ca98f19332ce88f35766b2a47bf8b05c6f2877a2ca5c1951e9c29d1e717e81c"}, {&(0x7f0000000240)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"2b6a50366a2acd400e76f67146953414822949d6bbbc326d9b860f7e935b3fb32cd5baee679e512d90266e002faec0d7cad61d3d5a452fcc745af9e80e5af808"}}}}}, {&(0x7f0000000140)={'GENERAL\x00', {&(0x7f00000003c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"02d2740d31ce794b3ef73ca5de8f22d0a411ab2d3a77c1abfa57c75de71babfea8b4a4ab92c00466d607042ab8d7acd5d3e4904b9314d29344400b4ba88f4858"}}}}}}}, 0x81}) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x884) (async, rerun: 64) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/94) (rerun: 64) [ 1223.320496] QAT: Device 129 not found 03:49:30 executing program 1: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="c56b6d7e08afaa516c8041b0e62a7416", 0x10) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}, 0x30) read$char_usb(r0, 0x0, 0x0) 03:49:30 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x2000e1, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={{}, 0x4}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x2000e1, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={{}, 0x4}) (async) 03:49:30 executing program 1: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="c56b6d7e08afaa516c8041b0e62a7416", 0x10) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}, 0x30) read$char_usb(r0, 0x0, 0x0) 03:49:30 executing program 3: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7f, @remote, 0xffffffff}}}, 0x30) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, "0100"}, 0xffffffff, 0x4, {}, 0x369, 0x0, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x3, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250e00000008000300", @ANYRES32=r5, @ANYBLOB="98000f00827844fe1400020000ffffffffffff09000000080211000001000000000900000008050802110000010010000005ffffffffffff040000000408021100000135080000040802110000010500000005080211000000ff0f000005ffffffffffff0300000005ffffffffffff0400000004ffffffffffff010000008c188d05fd15a3bc32bff53123c002d14723f4b730ea211e6f89dc210e8010000300079ae1e79210c709b84b5fddeb0003001b69cf45d4a1402db7f5215d8a709abc08d77d24af299552a9c9c3b9ff39d1abae03366b1183af1b3e7a161cbb7aa54f75bd3657448c76b28de4ddd7ede1c96c8cf95e3027739da2bf95c128ea0b44b292fcb8846cbf6011d99c5bbb205f931cafd06b5cb91f74b16a55f010f3543f48ebfa5caddbc2e1664f4ec0389e5df3f5f90ea18f054df1455d816735c7006e6ea947354e022d71b303d173d99f9b56800c14efb55749f17a3594928cc7e6b8d3a9ac313d7b3a6dd641ad2f753aa133b1908d302ca69e632d87498bcc4479098d073d255843ea20b1fe98393c5e0f1965f489a77f7b6478000400010004100200e8df498c9d6bc2df0eddf3e77f1d1431438f1a29fb4e14ddd41ed42eed7267d95fa842b3c8f247565c4ccd383d3b3de8002d1b9f874b0c63dcee83c080161273a0b1cdc5148ec2075d2dc2f9ef4af8f68a35d1e9b1663f59061d8d1b29fe7176851704608adde151df462b8b3e7ff09938431e4f79722de8492bdd5f5028e8b16c9877e0086a0cdd5930f26b216c1aa3c5900ec1bb1b546b3b35dac9fc19f38aa8e222565b170e2f31701360523b92da25cea4822b5704af21c2af878c88b8e82fddbef59087e6910658fd2bdd352c632b3c7550af154dc530964fd235a6325b80fe0e49f71f7fc74f79056834fdfcf487c02b0031fe9659b4fb277763dffe9f10e97d9542990ca5e8403c927355f2ace1dc36e3a1e750d3a448c10fd543796ea35677cda549cda5d1bf98a92f42eeca79e4d637872f9c456cff0900f8a4e79bfff55e3e608a1c5387d1a5b3aba13481fd6bb0d76c8e2d0d1465c8a4e1825bbf00438130c63c5bfeb2cf05a984f8444518c645bb56ab3a6cc179033462bca4a0c3ce95c8193d2c2c211ad68c638693f9341cb3b55b1e87c858ff80682858c45e303c429ca698f2424d04a266c35b4a1bfe4685e1ec1c40f93b7623a55d0bbffe9a86e07e1f8613250fb4df5e58f8e47207a38e294a8098d9e646a1e8263ae308260da2c49f704dec22248c48e1d63638a971446bca5f5546c8bee7aeb06a4bff21f8732fd1a5d735f50a7c348b539556e80164b329d425d38ba113e53fa4926ee74fb37791d05d8a75d8fa529c05701f0c0784ff173015121edb4c9fe7559a31b49a96d5d0c06bfb558565fd89a0236200783786988b30b687e95ce0346bda1d6146f84d432e6e3beb074d48c2f6b39f4f1b6d7c7fdb1a2f1d86fef21becd2a4ee5a790dae9d0297b98fb24070a0a4a4cdde6d1d1425a0081aa4db57a376fa34ab02e1c8431d26e4f51af86fb3204e4e940226f302e5f2f95fda20cb6534d1d03203a70fbfcd6e2040670161254da5f842b9d659f04c6f5c50ed14308640aa510a7e849693575ef109d8b1c35540dda99935ce5edff4dc8821fced8961d561df1acbc89f83d98f87b7db1e3ae9424471cdc67b9f86d555f9f8a59209bc443bc533a7f7f43a0f662c2c88ccf11b6c08beaa5d9f628cdf958d21c4ab2ff8cf61f01e1b507b1e97f8648c2343819ce44922f2e09ac8d3671a1ff67cfdc9dc883f334c7d0d7a20a43119f6c37ccf362618bbfa9729993594021384ac17228b3b6556f5c6e812c54d81ecefb5302d350ab64b89c492013d4ae36e96c28fabe5583ba49a2b1dcda7307927dac05887f9d8f7f79f5bda4e57702b3a49bebfdaf10ee04f921532ed305de4a4c86584a5c4a97ae99677bffdbbfa3a2f99439b631ec9ed68c6d781ef961d789077277a77b71a3adf6dbe33e0b51a1fb6f08941da1b199f0de6dbd175f6d236298dc462b0e4acf05f25a0adb4bcc3d3cafdda807b45a941def8ad459a2699fb64aed703ea02a1b64369c2d04275d3e94c73ce71f22bfe742ecc4d223ed3d9cbb8b2ad0c8d062f070a6262871bdb73ddc02374d2f3ebe8e36b1b660f6c6dab9c102a73b1891c72de2835b030364f4678bcbb0aa9bb74c995ff0bad0eba6a921f78eb7efeb428fb5a715d79c50042db5fa0c73b541782d03c6be5209963c2a94538f4fbc0194b08bb3b1dd2b2b559d8e7001036a08cf2d3f5593e98a91d7dc5ac1742960681d1a5ad2f6aff92b1c94a8d012bc657a092964d69440f856d9bbd91f3bf4c840b04c26eba4734f5951536269335527e1deeb14ee5e14f8677fedcff15d1e9f9f4fb6a68330f0ccfd35ae9cc9504ad8fc7e5b57c2262ccaf6c822ae41431fe3ba6c8eaa28398ce0736e695f64c52c3078a2bacf3c1c1ed586399d3c5f3252491c63309a70d649bab0232af62ecb4a0366e62670e22d52a010bf56afb959b41aebb362f5ab03297059642c3a495b5bc7d6ecd583712cf2ca46b46b672a54587fcc4277c883f5dab109b990020403c97aef78389ec788daef5e4973b40ecc30bbcf1fcccf32e4c80e86ccadcc83cb5f1c49ca18b3c07b92a4cd35a8af1dec48d05d7b30a8feff06731dfb280d830c35ab991bc36fca3f6521158fe4a367cb75bf48daa49e2d72dd611c3b87e2c28b64ef769633f6708e665019cc68e5e00538ed978f5e6a9ee41bc9ddde7291749d391c4eb03dcb9fa4942f900313f8e94fa88525471609f129a21ca6b67bd5a7d57cd62596fb652695b1abd9e535f256d73cc3abea5668b607ff5ce0e7eb98ab57d67fface0d2178de93510a2d468d8efb017511a1b52c733c282dfbdcfc935f86f1cbdf365770e525e77312b303d28536db9a77f0f849ba0d49f6f1a3e3002e573b67a28c39bab548d7feae37564b8d3ee4924b4268b944eda15cad05875fb636095ffa8dadf370e945cec561767edf3b0667be10f7fb372b8ea619c19d347ace86e4879a0480a9a9dff229b71d1f8c4aec20ee18d16a75a1cbc5354335eeafeb70c72775de6b4c8f7c739d36cfeb62024766743711e7b84da991b5a75ad8f6f36f41acc4beb3fe886ebda1aa293415adfd9129590b10c23f9dbf4c34bbe41b95b5228e4ebbfc9e322208f6529f8b019cadcd9661cde71999d50b0d2d579f35bbff2ea2970f34b6daf066cccea7dce5c9f765cfa174806279ab8096b8ba0fedc9c40df36d097752a0072ef62e8b3dd67f6abc286de08faa72065ad18c026897a167544d32b02455d8e2d0308ed0323280a057cae316aa90fef38811d92d7516d7325b8871c34ad6979dc20c03b530a97a50f5135d734906aa699f22e19bcfca2af2dd448394692839f5c55a7528c788c34e53370f628886746ae9bbb9b9212355b5cba916b798f350912a0ea90734bae0974fd6f4350140149df3403b0343b6b12e81209ceae2635af276c75e5678b54fc3bccced7dbdb304fb8ca8c9a7bc404b4996bcecb8c5402760b33f30d823af81450dfd32dce96f7b934e348e455216667c1453da684e657ff9fec7661337a47e9996adf0f1ae28d294de354f602c6a2ed63615fd6d1424f6994b93aaa1a35f964ef9551966faa104ccadd561f423135355904323d307155c1dd040078e693fd475134e939b663c5525c3c81c178b9a08f0ab25c8048f89245ffdb56866bc70285c440d3dae4686fec599aef89714b79b36303b7ace686efe1d8c5226c420f695c57ade4cdd5e666220e7794d75572ec42af0df60ca17d15e63091101f5465007e8011e11dffc86a4ad3e3f85f8cd6ab44081cd74f7b5fa95d35364b6b9d28ecd28dca22898120de1f10c486492c1474c244b56c17e175793071533c5e933f72c7c37af9e573e771bec9606652f880f20487c73db9e2968dbef30750469a7645ddcf04b75b2209c1f11afa6224f0a2b03c0466b6cb4e026978036886e8375ca67cfff9f211e3f43c2a5e5704f8ebd3914b8dd380106052cd31db2f064fd05bfb110ec02110aeca0ea571b0d97a6b4253ef317aa4dd842413cbbe2827fe90d45817eb04c9a5866f924b4e6b67f78447644264fb106b500e68e1dcbc82a267d9422476e9e1bfa78da6558ef18649f5bc26dea02ad8e71332749425166498fb7e7df1bf5d3e60b5b16c4e684d24e871c1d82537072e16ca6942466b941f4c6a237cbb963ef40bdfe50542506450086740d71aa6d604681b04c03b75b81612c2b84959f5b4ab959f49bc27cb2defce70c89acf8155e67275a8f0835fb4f0da9da7896602f60b8ecee3df6df2f7b7858206882eefd8d2658257b8e95d90dfc9b0449eec08d23d91a77e522143900301ac3c113fe7cec47f65e56b485e51648633e4e8e22b60014ea7570c011423145b7037c3bc564b67a6f706c9ad92e7110cf4b32bec5a1189bfbf124d60af131f29c532c2bc794bdb9ae7d6d926048815812d7eac53d8b6918015605a33be32dcc4d39c0e9b29a8261130fd4e84598f696cdcf20477128a638f4ad984d1d0a7d8dd519b0d87a31bde875948f66c2abed38fb073469d660ae1127e39569be15a1e9097e3d7dfbe4debdb92cfc7dd0873d19218d09c2fc78ba4d94f8227ceb20a8f6c85affbf866ebc14d12b530ecb8dc4d433470461ae16272e63bdff3c36658147cb049eb9283d94587ee774115a33e6254ad6ed816f8126154866077c8ade4d90cdd2407e3a175ea1f0720aec4747fee96411f03d4bae1b43866d7a434a9c4a45d0625e86faa691ae4e535150008646aaed2b61493c10ea789afb8f7e3a8f40c02afa5ef305210ddd8c1288a51c835fb56856caec2b66b5cbe8f2401377e08810155bec9392758c7f2d3e3913663c582ad20cfae1c5c4bb9d4dc3fa3c0353209d5ae2fe235f1b767e8b45da443f9f7a668b1aab3f98c6dc165f7ec9345d791b558d714b6ab9876753120e71b325863fd8569da084dc89f0d9269392455ce8ebcc64f3eaf3d59a072b80cc4164de517a28aea02a0ba56a54c76fe7f049839ddc4be050d967e210f783c4f7d265e5885a47ea02c0482d078e5256df4ba917af446c99484887fedfd7a7d59479bec81c4f69bc4267efc984d0a8968c3477af1644d5e5edbee8529a0532ae1565a04e9999f4104908ceb66b5f8e8c7c5a308f7c0e9ecb55ae4046b947429e168a2557487bebc464d91f7038fa28456144acee2cb37a79296ab96907aeac2a4fa6c5f89e38fb4e63da1f59a29a76e49dfe4a6597721f3e4e38c0567c3f1b0dba5ed36a7463ffe88da1c3d477b7727fb01be535619206b9b73672c456707a93bd01398cded13e2d683678e612af78b927b1ada643428d022777532f6efb13e90b8bd7de538fa98b953b6c2c7bd30bc919095e6f4bef4f426f88944d6352da6bef5ec2e570d6c74314baafc880321f776a51907b976163c62770bc2cfbb5377f434d2c2054b865f9a31b4500a91d6c9ff81164ef610317c4ac01fe5e8599a1d3f98afff563ea781cfa5f6cfe89b868e09d41ac15cfd164f8af0230fc4ab3de66009da47465a15975b8e71dd16cde9fb8958314f394d939be14d31336cedafa9a405d8be4dd16278c6966a657745b35199492f15242e4096d9cfac4b5fb40d8da45fdfed0bc426f3a9f9764d130e4ca169d289952bb449efa3780a6e4e2453385086538689516fa6d74a351d97a22697cd3d0891a14fef68a1a0bd8fe6281cca6e23b17d9fe7e1489fd093d17dafc48d7d3378f3b0ef0ea9c89c88a77a2fa6e41a35d48fde9a27a59fd9f215b2979b2492523ac4c00c654389e8f64273fe3542de91d7716bb6fb7f166bc5d461dd4ebdb0198aa150c112d59e4a6e0ef07c4ae38d15cefb65999b1b7eeb7a768b35cf999d4331e9dc1bfdac8f662318de61d7d60c30337247017cb77c8f72f488aad1aada1a9a553b8d24a91be40e5fda914b43422545b21430e958c15f4ac9807776176ceb80c9239b2fc054b41c9406cb6f94a7f44e18afc36f452765ba1201579dd4524767d7aef5b1db4e8efde2e287382d090b28fd1de9708f3d346f0efef0a8aa4d9a543652c1f8023d83e1c6988264cb913a9c92743003d5a5429657b88e9766aa53ca0bf4c0dac62b2bd5fb946f609f326b691f3af0ed9784e4d9cf23f157a2e6d8892aa8ff05c2190705387dba40d7f5a6eb08b2d3ef3cc7f176586d6b8ac7bdf96c3ca593871ef78c9dbcc3121bde756e966fd94b5acc28540d36cc2039db7323fcc2b9598dc214083050abb8db8e8f8a7188f749902ff83963ac1b00594e7c2538ede95e3dde2e885142b0dc21c5deacdd0400010004100200c458733cc345ac3418e14533221b95b6b01cebd608cb1dff654a84042f8d5a7968c2b6aa16c613fa354b757ebe3e3dfdde2d8eae31c38c0c6abf6b14b0cb82c2863a5b624bb18551dd6e68dcfbad994cb02559a107b439bf98a8e9590c4bd3fe15c050c0c0b5c7dda4518ef50cc51b3bc58941d5d01ab384bfa279e90ae111c972bc0094d483e0900f8f5327f3762aa828395f127c17a5dd0d4f249ddaa4510e14fd378c57a13b90dc84805d808a35f8eb6f760b2487db27ee8b5e1b6b88a09811ed61475ee7f52268b1fc87657204531048b2da5ce1fe2c9c061ee2e846dd6ee1ca4e31955c8d1917ef7cd7aa504238df5396a3a3e4de5349f45db31ffe99d2de694d2d61b3978b0949de24953b94e8609254d8d55f612b209357d069f2b532f9e106c7f10678ac6689626366076366aa9c35fdac927d8f89a73ffd288fe918177982c93c556ca8f0781e46a5fb0ec4e8cbed7092350946b12837e95472c5063730ef7c3c37758e74b43cef257bdf7bf263d9008430faee435e648f4ca99a6e822c61efca81f60112bd855b70420f1ad49aba1e7e44121dc57f9d52179c2177437c6fb1d47519e260ee16bd1f3f70e249b090acbd5b76e0d372dc39eb18f0df4cb57b6bccfe4d0752c486f28acb27d3047b0d9b384c7f790742811f78bd14ea2b9a725ada62a31833a23f9b9c281dd214ccd200058499540a8d47e942351800314b903c362a02d5dfe7b021c63add0e4075d92779bc7fbfdf1680aa44cf16080b5c540e326221763350e40288448144bd6b6afd11823570e5c9357e63bf55df8ce2891e5ce970ac18dbeaefda4a54c7c4f519248b2914487824910ff70046d21d5b07b0b53f692228f65c5a04e92876232206f8485936dad8f8b96b7c7ff5483ea80eefc7972a2f39b8dd22ce8aa6799b11db92b2568e60c17dd13527f304955530fc05cf0396f08b2d5b9800b1e8d19c9c1d77660d34b28b49472209f33d85a39971506184381b316268e9ff0753b5698d8a4b8680820caaccad91d49b95998f0410e11e18dd8e085a697596a3653d248aacef727f40b068583f1940ee3731d04c592aa2401475d98bebc873772e0370a857b4c31251f1613d021ca966d3eefba1bd370f6edfe871db9ee51d49222750be37b1ef308fbd7d5133cc4965b3630e0b9dff5a9e9b4d5f61a0e0cfa6f8353322852d033a3dbaa1758f09ee731c333112227bd722b41e915649274a8ce9a6657134dc0f176a89b57fc6c54db91c215829eaf8fec0069c643b5b2073e0e69fe573a6ba814426b4d778b606b1b7a2bef21eda17e81ffe7fd9e0c3773136b8ec6142a08f3ad94a4719c316af0ac5b820018c195aaedb9ca867c7396c9ee96f30e87d9af5805b737c7996f1b5929a75d5e2ca7c54cd7c8294c92f281ed3e3b66a3349238e263136a20da6ad8111b71aa8b9943c80648c62a19f7e165f59b0d080e260f816861820e8e8b6c4d7e064577ab8ec1424b31019a4b6e8308de8d03ad76a093df6848ee7e62af2fa17a331344ec1c31911149249c360bcedd0f56738c830e10ca283f3f3a6dba74be215e7a62980c35ebc5706101da151965644cb815da90a399b3757e2933512008ef66094f502b97f663f308d9eda9a824f0acffed98dc226fc7a3430eb6699babfe0c8bf72826e9202a4f2f13f90c1689050067f67b30b426640fd6776a46befbb787708d54868f256cea4fc723e751e1b99333bdc42088461b4e5b675a02133b6ec9332add8f66c618cab8bac3457b8c03f381311e6bd5d2eab5bdd43129b644f12d8790c9a304ff292bc22c1d0693ead33fa88b745d70ba38e983fedebe7a120539636741a54b15a9abf33524a509fc3de3319c10742389aa4361cc371647905287d6ac9dc7aea5c0f611cf041946891ba086f59d96eb28c915443b11c9fd52ebe2c990814890caee29868cd31c670bf5a43eb17d2d87821cea9f7715ba36d3fbd18ba7dff664249091740536fd3f81dd71988e5b33a6b6e97cfee0af00d66ccb5bd320ce42ac2809b1682904d06798965d8fdf394079b953de2ac92b420cb56046d3ab079d6861a88f41bf9cded923a48611d6d467d45026d392db2f2043a6bd5b55593052d008221ba821ab0fc41a696d23318217fb1eea6b3606325eb5d6978e1f70530c1d5454daadab723d6139685cac5da4e3bbf8accdc043b85e7184973eb1a89435e31ba7e2b40a6b524543f0ac2c61ef1b44932b60d3bade83c05325d5409fc8b8497051726cae6f399834ce9dfe79e13ff09108e45042a96ef167948d4b128ed15ef1618f4f6e33032ff2edf8fac7c690d9f93c703815184f69d5123b2bda303e6fd2b31e84ead598c305510f7f024873c5cc6d7f1fe6b466aea9b4f0c6749a8cd4c8001e1924ec6dede5b33ed8562eef1cc45748fbd5d3899e98e710c027eb6f3c4f39b4dff4de44b76102185cae3bbb372be716b88500bcd7b899bdd572027c5e48533fbd8084c7454443ad38ee2562c297bb752a6e8b36bbc226f5645b687b48255e197f3f0248e7cae70f749aa1072281543b4207e2213928c0d8e9f0d4341918e2ec84f42b0a302b17cafc75c91c7c0e69f35a0e1c8e9db40d33c709f155e15d6dd41ba7004a0fc456a7066f0bae9b34261f56add8258e8952562eb82ce62f29bcdb007d493d49c4973d08cf6fff9b87eaf58e2e1cad15352c51504c6d01b673a52fa55cba224b97c853d73c5e63b81a1614eacbf12d29159d37bc1cc9f71996c28f4e140ffaefba4a3be6540b75b59ddd54593aeee9c0c9c88cdf69aebfaa0afdedc5cee24a85844d15c23d4572f14929d93be5bf1518a3428db03c949fdfc7cd5b2bff72403eb53a223c20a5a93337b542206c815b24109026ddf730c18adc49239e3f4ef2df422fa6c49dabe2249bf378d2aa710f0e4801baaa8c280978cb00a5eadee6cb54edaed2bfce68b8944ffc75c7a4147eb0fd766d143cd89924ae2a0225051de0a9071130754921fc64cbb8a3da5e05b610a7427617696b28f2f00ec3cac8eb496ee6e5fea3d3abd8eedbf78d1eb8cbbab1e10358d5ad05531b437a9f0fe97061f115d158c33f57b194d1e488ea83e08a85617d18e39ff497d4198c82c359f58951f7b39bb19d4cca88227b12c1e772f1628437954e65356a67171d2cb28c4e1eecbeb2c354960a78b8d67b35f2ee1e5c2fa7cf78e0027bb545b467aeb4117e721a79b2b18008a05a6c4d46dd31d05610e9e3a600a6c6bd7a613355de770cda6f30e74f788cfcd64d95e21534f971b8dd8bb662efcea00cd8216e50c37db0ef287000606e58d6376f355fe1c93afb8bbe83fe9b7454b24ab6f0e77fb9f64c7b69b304aaaf5b499fab30d0234460a03bc9b2cffc759bddb46a11c2d537d2ec96ed80f7b6c700c8709daa572b50dbbcfa24622fbfcfff8817c4f1c1c87c7139c30be5d9bbffdeaec981517536d49d2c781e160e49a852c495490f02b6003feacdf05edc188387ff4e8fcc0a28d330ab8f7412a44dd243de837bf444fd7b800b14ccb5f9c14064be64c0f2421c9b4adf3953440910030fc197b0fc6e062092bd0069f3f7fb96a54e6623cf5bd9526ab53ea797b7a16ece59ffc9e12ecc94f131db45db342f9c54a24c63184e87af0955f6ab3909642ee22bbc805893cfeb03ebbc4e61d8cc352d1412fe214b479ca92cc607dbb29e20aafd761736f2bb1db8ad3bca63be20d7a50a5b7dfeb639901687a79f7a532b88a68c0b1a8779f3b173bf931b1bd266b10337bfe906053bb7d253fba53582b2515328d1e968bb0d063fb2785f0201026f8e5830ac04ee37902085a874096c46d02cb747ee2f7b775bd9ab1d1115274ebef174b0fa14c7a6905e35a0eea7a1423fece318417fdadde3ac1be4ee5af892f1b5ffb76247ebc21c244bc5d6bdb952a6fd6a0170047ce11c84cb312a692551d34267733c92d0e6e0a4734785cb6110df36a9e64a3d4beeacbc604e809f4b43630c1b2487fc6c418e7c74233dda02d97e018a1ca38a256b4a2b4774d359ebccb8b4eca47566c3c9c2c91237ebe62141bc4798c958b298f9fbae27aee0718e742e294b57e2547ddfecee1ece25ae19bec7ae5284ccb14484a0ace0e6e886c9cbb8758cd9a10c9caefd233c8d2ec17ec23551000fd15756c8b978b17c6bb595e11b378a9807494a743801cb70fc5dad855721c90f319374983ddc9bef6b78b41b9219bc5288ce52cfe80c1564cfd101acda9ca5eec2bcf9ff897cf51321e65e6842f85d70c2989b3ba990a640470e1ac89279cdb4a93410684345f757abb079b92155b6eb52e54b417e390cd95738b2cdb497e7a0723f48d116cb62739651e3f498de8539b244662f1f483bd45124ed2d97318f8718ccf9d7c1999140e9379b533e2c665b0ef596c0b61964aab8ec69fedc7a4cad90d36cf45c8fd98c2bd3d1c7f70aadcc88b48bfb64b0dcdf36a822fd4278291549111112c12ec9549969cda61379eac59d1b48e39e06938c1fe1eae8bdd4320d2234cc87b2d8ef7aef079db3ef49740e312c9ee371e64eb9582e43c68c08bd91cf09f4683cd54d85e4ba7e752a518d470de7cd04beb5843b69bea43cb22e24d6d9f2c2044397af20809247b2a0024c9ee4c7f8a1c1dd689a48a498bfcb7bda46d97da5a16b6c19054258108a46eaba69b9877ba088c8fe7b5117f749d5d8ada51ade6ca71b29461dee8e7771bf3958d1b549e5d92f4c6c511b37a413e17bf6c6a98d1259cb3b3d2a3f59c7eed386f8f1df049f060c1d5f67fea29a3240982de66f7bd6b355714a9f13de4e4d4133fd893071ca4d98dfc75f479ce4b10ea0e0f809c49338a7d4ff6d7e81eb85f96d9ca101a552af9f3542072eac334ba79d869e5fb286831ed57b76e60bbea39daa88a763f60e9f50d500db61105959fb8802dcb0ca269a9199852f3ae6a261ffd7509ff64cd9d1464ba37333fe6946138cd649f8526c7da1afac6cb2238a5cb23ef7c5e376a1bf377024cdf1ff648d13b0122df63b90b21a8349d44fee95a3f74603d18023f1dda336ed0552ffdd67ac1ff9fc0d2e2fa98d24b869f405239963923b26736dae54a3309e15fee02b420e65181b9eaf396f46146f8e3779aff70c4efcb96f44c8cbea617b84384a125a68913b9225ff6cd25bf3650b28685bbb98078380cbbabd54ec524a91c7c69bf2e528d47fb87942d1090b435db12b818d8f83da933c6fe3b270e3a940925baf82c788f4b57dfb7d243920763b3ec9ff61681df89593f6833c9c83803453500a8b2dea48298ac0ea6b2f2a512cbf32e85054a9548b814cb59b5b6e68cbd75dd3f4ea18ec99a1075f9af00fa03cdd01a47cc00e4263653135fa74452bcc5ead0c3830e44c2a0abffe548826fb13d58fb343c697be434a952f0298694c920293a511bca4e7c2db848c2eb2f0bcc1bfd17507b92956f7d3da32de6f115022289831d5b7887915193571e1ec42511eb846a2db545af3fce397510b3cbeaea822c0396b62d685d63704f624380366cddc48d45945230ae529919ff5ab5a6ec6131fb2319435bc9e6f3861d87e327039204f485b2c3e0a89b9ae52722d755c6e95554f72f9865a84205eb9befdbe0dd8aa6a3a7309b07ac3ba0cf17931989874ddc90c400995f468016aa9d8ade7129402a19d5bbf1b63889b451e733ae67998b993f3f6f135915e5024756d604adbd74dc2e3cd5286c9fe3f03b6eed04206cee9104d5c1a569c9225ebb454dfefcc11d81d5099e2b99bb010194f4f2988f25c242ee9aedbd9647c5000200d887778b4f5a4f90d44ee1fa555d26a5663f0c0291798849f735f4a4047d47e0b7e0245a2f4e414bf5e5c8bcaf4a9620110431e1cc3b68b6678fa3874497b8e8692fe86c87420b176b815fa28e2996b1518c9cdb9a070793f1f0813494b2d1a63b452db36b915c3df5c200c0d8d05090c486f194b9156b04449a928e30da8868cf383e8455c4bb1f63fc9c8e92aa42079324622bcb4a3144542a0b326df5d7ca6a3b0ed398494578d26c012cecf963af888ea5aae947284839b2c01ee26278e8e40000000400010008007f000602ff03f3007f000301ac3c0401098c06dde40fa746e797ab5a19f1c7f3e482064f5bbc30c8b2f04d96fd55ca9efbde5a6e5e56f4055e20a9330f264a5d796c6f2e890804acc29a9d7dcaf41eb25d860d9690c8a1f7cc05d24f5d2c1608a4e49a9c38f6776d1d4db28a5823bda30d5a949939a8647959a27e6d89b32b169a9c036e2e24617ba3e6a85dcfb0d1c70ae4ce465657dff79576a1af0a5bc26e5a1b4412d4089ee4a573535265411a0cf2247cc66cebf1d52a797471e8ef715f9c62f2a7c42531c8aa7eb6cb6d09f7b28ca042b85f874a73dc8ab21a929a309c0b09f1d44da5450439cdafce99003be1b09d55ff92c77f2d4a005e002a006512af634fb25698ffffffffffff0802110000007e15120780ffffffffffff05000000ffffffff200000008325408107080211000000000000000802110000010600000003000000ffffffffffff040000007206030303030303000007002a002a010700fc010f0004060205010001017606a70600000300055f01e202d6972b24c2aae79a189f57cc0fa33cbeed8426235ea5dc69fb1587877b05104d83f778f38d5274db59d7026ee5c4e47fd89b53ef8163427837589b04a110a3ae4baf9ba04fa384627e7fce6d0806ed52eec5f7001399f18d2472c2357e15030505ffffffffffffff0300000000000069e10000dd7555c81b6fc3da92de7ba67068e3c4cb73d090117718661792f1468647053a2afdd92119c5d67253e6254c2f52ad31a53f1c1fca5bd7ad0052d72827e6ff8c28aa1d3e6ca42b3cb64486593eac85cc8a8747a513a4727c8cd27fe04679eb8e5007cb889564acc8f2f0b0ba79a620cfc05b0017df64438c187e02a4fe6e7be9f63c0fbf5fe2de1186bca57f99fc5f7c90dd54df84ce746e2905e98ec479999115f6fb81983dd47ae81742939551a0a538bec8ba99582eee11a6511bff71b909b6e462778c01622542c15b6b2f6dfab81b7dda06dd7ffa9c3ba94f5240c0886e6a3bf2ab4313990301b7377b090370263989167e059fef1ef263241f869f543c72a82bdfb688200539c45d3b50be5bbd0689731ac74b7d0416e98e4c8c772805d077d5e30795e17ff2453b2dda86f06c63ca0da1867ac30e63141961f35d040bace005213efeff11800de1011604acc77c8957614da04f698a229fb3d731bf939054db0202aaa57107ff00ff00ff090900018000054f02eb4040b99cd538387cfbbdb0ce051a1608d4cdbb4d0b2ed4ec419c86b7b8c9c13e2b2721b4eb9eb992b3c8a3e91d5f693a5d435ffb1aa5ae89349f2b5282ad12f4392758d89cebd094c8eb34cb5f760681934100faff05a101861fc4461cb32f45855985470c66a6d1ba5640123721860433fe74ad2f967e6c6aaa403722f28b0058a6921c7c854d6cecc064cb81eb05e161722f7202c39278417505323e4d298feb567553c330fa1503ef065c20fb401322964ec8e442f025929e2a29ae41a4d144f2fed33b5cb370beaa49308d627889d1d3ac9e2b43aa0e16e7feaecee25d96ea4614d60fa0de1176622f8702cf7d156ec94e73f73e480bd8000e80a3000200abd30daa0a56200fe7b7d3e47c432125a4a87077163f30ea7f85acfbb9af8f68145ec9060ea608d17c4a4e9d8979989925593ad0bb9777dff97f1f6f824970334bc2481aa9aaeee47f29e9861e87cafcb31f0a5bdb7795b3a4d4c04ee4b21ba5d92d24adcf12ccda2c978fcbd090cdf791035d9c309ab232486ba6933b3cf1fed917060a8faf89c3a89885c7278e55560efa2c0ddf8be962854eb3c13e2b8800040001002a000200703c4c3a0ff838df2073d18a80a3d241bdd8ffedda9e20a52931e33f8f1dc1cadc86726364d40000"], 0x27c8}, 0x1, 0x0, 0x0, 0x8001}, 0x8850) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) mkdirat$cgroup(r4, &(0x7f0000000380)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r4, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) readlinkat(r7, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/20, 0x14) 03:49:30 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x2000e1, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={{}, 0x4}) 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0x3dfd}, {&(0x7f0000000040)=@adf_hex={@format={'Cy', '2', 'RingSymTx\x00'}, {0x3}}}}}, {&(0x7f00000001c0)={'GENERAL\x00'}}}}, 0x80}) 03:49:30 executing program 3: pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7f, @remote, 0xffffffff}}}, 0x30) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 03:49:30 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0xfffffe67) [ 1223.480341] QAT: Device 129 not found [ 1223.484690] QAT: Device 129 not found [ 1223.498054] QAT: Device 129 not found [ 1223.508490] QAT: Device 129 not found [ 1223.517395] QAT: Device 129 not found [ 1223.530215] QAT: Device 129 not found [ 1223.548049] QAT: Device 129 not found [ 1223.565631] QAT: Device 129 not found 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0x3dfd}, {&(0x7f0000000040)=@adf_hex={@format={'Cy', '2', 'RingSymTx\x00'}, {0x3}}}}}, {&(0x7f00000001c0)={'GENERAL\x00'}}}}, 0x80}) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) (rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, "0100"}, 0xffffffff, 0x4, {}, 0x369, 0x0, r1}) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x3, 0x4) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250e00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x27c8}, 0x1, 0x0, 0x0, 0x8001}, 0x8850) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (rerun: 64) mkdirat$cgroup(r4, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) readlinkat(r7, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/20, 0x14) [ 1223.578800] QAT: Device 129 not found [ 1223.598661] QAT: Device 129 not found [ 1223.605108] QAT: Device 129 not found [ 1223.621793] QAT: Device 129 not found [ 1223.632640] QAT: Device 129 not found [ 1223.639991] QAT: Device 129 not found [ 1223.645240] QAT: Device 129 not found [ 1223.649198] QAT: Device 129 not found [ 1223.658367] QAT: Device 129 not found [ 1223.666827] QAT: Device 129 not found [ 1223.675857] QAT: Device 129 not found [ 1223.679714] QAT: Device 129 not found [ 1223.685122] QAT: Device 129 not found [ 1223.688941] QAT: Device 129 not found [ 1223.694616] QAT: Device 129 not found [ 1223.698492] QAT: Device 129 not found [ 1223.703561] QAT: Device 129 not found [ 1223.707483] QAT: Device 129 not found [ 1223.711297] QAT: Device 129 not found [ 1223.715213] QAT: Device 129 not found [ 1223.719016] QAT: Device 129 not found [ 1223.722907] QAT: Device 129 not found [ 1223.726716] QAT: Device 129 not found [ 1223.730525] QAT: Device 129 not found [ 1223.734379] QAT: Device 129 not found [ 1223.738196] QAT: Device 129 not found [ 1223.742070] QAT: Device 129 not found [ 1223.745894] QAT: Device 129 not found [ 1223.749714] QAT: Device 129 not found [ 1223.753576] QAT: Device 129 not found [ 1223.757394] QAT: Device 129 not found [ 1223.761202] QAT: Device 129 not found [ 1223.765173] QAT: Device 129 not found [ 1223.768982] QAT: Device 129 not found [ 1223.772853] QAT: Device 129 not found [ 1223.776672] QAT: Device 129 not found [ 1223.780476] QAT: Device 129 not found [ 1223.784335] QAT: Device 129 not found [ 1223.788151] QAT: Device 129 not found [ 1223.792012] QAT: Device 129 not found [ 1223.795821] QAT: Device 129 not found [ 1223.799618] QAT: Device 129 not found [ 1223.804108] QAT: Device 129 not found [ 1223.807934] QAT: Device 129 not found [ 1223.811820] QAT: Device 129 not found [ 1223.815633] QAT: Device 129 not found [ 1223.819457] QAT: Device 129 not found [ 1223.823345] QAT: Device 129 not found [ 1223.827178] QAT: Device 129 not found 03:49:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xff7f, 0x0, 0x7, 0x3f}, 0x8) r2 = msgget(0x3, 0x104) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f0000000300)=@adf_str={@normal='NumberDcInstances\x00', {"3a1ea75ae85ae2b7cd033577185b7523edfa2c51521e133fa83d3f63969c97b33ca98f19332ce88f35766b2a47bf8b05c6f2877a2ca5c1951e9c29d1e717e81c"}, {&(0x7f0000000240)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"2b6a50366a2acd400e76f67146953414822949d6bbbc326d9b860f7e935b3fb32cd5baee679e512d90266e002faec0d7cad61d3d5a452fcc745af9e80e5af808"}}}}}, {&(0x7f0000000140)={'GENERAL\x00', {&(0x7f00000003c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"02d2740d31ce794b3ef73ca5de8f22d0a411ab2d3a77c1abfa57c75de71babfea8b4a4ab92c00466d607042ab8d7acd5d3e4904b9314d29344400b4ba88f4858"}}}}}}}, 0x81}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x884) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/94) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xff7f, 0x0, 0x7, 0x3f}, 0x8) (async) msgget(0x3, 0x104) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f0000000300)=@adf_str={@normal='NumberDcInstances\x00', {"3a1ea75ae85ae2b7cd033577185b7523edfa2c51521e133fa83d3f63969c97b33ca98f19332ce88f35766b2a47bf8b05c6f2877a2ca5c1951e9c29d1e717e81c"}, {&(0x7f0000000240)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"2b6a50366a2acd400e76f67146953414822949d6bbbc326d9b860f7e935b3fb32cd5baee679e512d90266e002faec0d7cad61d3d5a452fcc745af9e80e5af808"}}}}}, {&(0x7f0000000140)={'GENERAL\x00', {&(0x7f00000003c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"02d2740d31ce794b3ef73ca5de8f22d0a411ab2d3a77c1abfa57c75de71babfea8b4a4ab92c00466d607042ab8d7acd5d3e4904b9314d29344400b4ba88f4858"}}}}}}}, 0x81}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x884) (async) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/94) (async) 03:49:30 executing program 4: pkey_mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0xffffffffffffffff) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10100, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000940)={{&(0x7f00000008c0)={'Accelerator1\x00', {&(0x7f0000000780)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x8}, {&(0x7f00000006c0)=@adf_dec={@normal='NumberCyInstances\x00', {0x5}}}}}, {&(0x7f0000000840)={'Accelerator0\x00'}}}}, 0x1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'KERNEL\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '3', 'NumConcurrentSymRequests\x00'}, {0x6}, {&(0x7f0000000040)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8}, {&(0x7f00000005c0)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000500)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x101}}}}}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_hex={@normal='NumberCyInstances\x00', {0x80}, {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '3', 'RingSymTx\x00'}, {0xfffffffffffffffc}}}}}}}}}, 0x2f}) msgctl$IPC_RMID(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:30 executing program 3: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7f, @remote, 0xffffffff}}}, 0x30) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7f, @remote, 0xffffffff}}}, 0x30) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) 03:49:30 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0xfffffe67) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) read$char_usb(r0, 0x0, 0xfffffe67) (async) 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0x3dfd}, {&(0x7f0000000040)=@adf_hex={@format={'Cy', '2', 'RingSymTx\x00'}, {0x3}}}}}, {&(0x7f00000001c0)={'GENERAL\x00'}}}}, 0x80}) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_dec={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0x3dfd}, {&(0x7f0000000040)=@adf_hex={@format={'Cy', '2', 'RingSymTx\x00'}, {0x3}}}}}, {&(0x7f00000001c0)={'GENERAL\x00'}}}}, 0x80}) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x109042) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) [ 1223.830986] QAT: Device 129 not found [ 1223.834845] QAT: Device 129 not found [ 1223.838668] QAT: Device 129 not found [ 1223.842563] QAT: Device 129 not found [ 1223.846370] QAT: Device 129 not found [ 1223.850173] QAT: Device 129 not found [ 1223.854036] QAT: Device 129 not found [ 1223.857851] QAT: Device 129 not found 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x109042) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:30 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0xfffffe67) (async) read$char_usb(r0, 0x0, 0xfffffe67) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x109042) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:30 executing program 4: pkey_mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0xffffffffffffffff) (async, rerun: 32) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3000) (rerun: 32) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10100, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000940)={{&(0x7f00000008c0)={'Accelerator1\x00', {&(0x7f0000000780)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x8}, {&(0x7f00000006c0)=@adf_dec={@normal='NumberCyInstances\x00', {0x5}}}}}, {&(0x7f0000000840)={'Accelerator0\x00'}}}}, 0x1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'KERNEL\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '3', 'NumConcurrentSymRequests\x00'}, {0x6}, {&(0x7f0000000040)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8}, {&(0x7f00000005c0)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000500)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x101}}}}}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_hex={@normal='NumberCyInstances\x00', {0x80}, {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '3', 'RingSymTx\x00'}, {0xfffffffffffffffc}}}}}}}}}, 0x2f}) (async) msgctl$IPC_RMID(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1223.977127] QAT: Device 129 not found 03:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x8, 0x5, "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", 0x0, 0x3, 0x1, 0x72, 0x81, 0x2, 0x7f}, r1}}, 0x120) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@format={'Dc', '3', 'RingSymRx\x00'}, {0x5}, {&(0x7f0000000240)=@adf_dec={@normal='NumberCyInstances\x00', {0x10000}}}}}}}, 0x1b}) 03:49:30 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0xfffffffffffffffd, {0x7fff, 0x8, "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", 0x7f, 0x2, 0x4, 0x93, 0x8, 0x3f}, r2}}, 0x128) 03:49:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0xfffffffffffffffc, 0x82) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x680001) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5, 0x9, 0x4, 0xe000, 0x1, {r2, r3/1000+60000}, {0x1, 0x2, 0x4, 0x0, 0x1, 0x0, "286517d5"}, 0x8, 0x4, {}, 0x1}) read$char_usb(r0, 0x0, 0x0) 03:49:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) 03:49:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0xfffffffffffffffd, {0x7fff, 0x8, "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", 0x7f, 0x2, 0x4, 0x93, 0x8, 0x3f}, r2}}, 0x128) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0xfffffffffffffffd, {0x7fff, 0x8, "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", 0x7f, 0x2, 0x4, 0x93, 0x8, 0x3f}, r2}}, 0x128) (async) 03:49:31 executing program 4: pkey_mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0xffffffffffffffff) (async, rerun: 64) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3000) (async, rerun: 64) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x10100, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000940)={{&(0x7f00000008c0)={'Accelerator1\x00', {&(0x7f0000000780)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x8}, {&(0x7f00000006c0)=@adf_dec={@normal='NumberCyInstances\x00', {0x5}}}}}, {&(0x7f0000000840)={'Accelerator0\x00'}}}}, 0x1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'KERNEL\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '3', 'NumConcurrentSymRequests\x00'}, {0x6}, {&(0x7f0000000040)=@adf_hex={@format={'Dc', '3', 'RingAsymTx\x00'}, {0x8}, {&(0x7f00000005c0)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingNumResponses\x00'}, {}, {&(0x7f0000000500)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x101}}}}}}}}}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000280)=@adf_hex={@normal='NumberCyInstances\x00', {0x80}, {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '3', 'RingSymTx\x00'}, {0xfffffffffffffffc}}}}}}}}}, 0x2f}) (async) msgctl$IPC_RMID(0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:31 executing program 3: mq_unlink(&(0x7f0000000000)='\'^-\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/136, 0x88, 0x0, &(0x7f0000000040)=""/45, 0x2d}, &(0x7f0000000200)=0x40) 03:49:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x400000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x8, 0x5, "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", 0x0, 0x3, 0x1, 0x72, 0x81, 0x2, 0x7f}, r1}}, 0x120) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@format={'Dc', '3', 'RingSymRx\x00'}, {0x5}, {&(0x7f0000000240)=@adf_dec={@normal='NumberCyInstances\x00', {0x10000}}}}}}}, 0x1b}) 03:49:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_dec={@bank={'Bank', '0', 'CoreAffinity\x00'}, {0x4}, {&(0x7f0000000000)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@format={'Cy', '4', 'RingSymTx\x00'}, {0x8000000000000000}}}}}}}, 0xc9}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0xfffffffffffffffc, 0x82) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x680001) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5, 0x9, 0x4, 0xe000, 0x1, {r2, r3/1000+60000}, {0x1, 0x2, 0x4, 0x0, 0x1, 0x0, "286517d5"}, 0x8, 0x4, {}, 0x1}) (async) read$char_usb(r0, 0x0, 0x0) 03:49:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x3, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) (async) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x8, 0x5, "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", 0x0, 0x3, 0x1, 0x72, 0x81, 0x2, 0x7f}, r1}}, 0x120) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000340)=@adf_dec={@format={'Dc', '3', 'RingSymRx\x00'}, {0x5}, {&(0x7f0000000240)=@adf_dec={@normal='NumberCyInstances\x00', {0x10000}}}}}}}, 0x1b}) 03:49:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0xfffffffffffffffd, {0x7fff, 0x8, "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", 0x7f, 0x2, 0x4, 0x93, 0x8, 0x3f}, r2}}, 0x128) 03:49:31 executing program 3: mq_unlink(&(0x7f0000000000)='\'^-\x00') (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/136, 0x88, 0x0, &(0x7f0000000040)=""/45, 0x2d}, &(0x7f0000000200)=0x40) 03:49:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:31 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x1}) [ 1224.300184] QAT: failed to copy from user cfg_data. 03:49:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0xfffffffffffffffc, 0x82) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x680001) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x5, 0x9, 0x4, 0xe000, 0x1, {r2, r3/1000+60000}, {0x1, 0x2, 0x4, 0x0, 0x1, 0x0, "286517d5"}, 0x8, 0x4, {}, 0x1}) (async) read$char_usb(r0, 0x0, 0x0) 03:49:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x23f, 0x30200) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_dec={@bank={'Bank', '0', 'CoreAffinity\x00'}, {0x4}, {&(0x7f0000000000)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@format={'Cy', '4', 'RingSymTx\x00'}, {0x8000000000000000}}}}}}}, 0xc9}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:31 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x1}) (async) 03:49:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:31 executing program 3: mq_unlink(&(0x7f0000000000)='\'^-\x00') (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) (async) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/136, 0x88, 0x0, &(0x7f0000000040)=""/45, 0x2d}, &(0x7f0000000200)=0x40) 03:49:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x23f, 0x30200) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) syz_open_dev$video(&(0x7f0000000800), 0x23f, 0x30200) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) (async) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_dec={@bank={'Bank', '0', 'CoreAffinity\x00'}, {0x4}, {&(0x7f0000000000)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@format={'Cy', '4', 'RingSymTx\x00'}, {0x8000000000000000}}}}}}}, 0xc9}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1224.447318] QAT: failed to copy from user cfg_data. 03:49:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x23f, 0x30200) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:31 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) [ 1224.539671] QAT: failed to copy from user cfg_data. 03:49:31 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x1}) 03:49:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x4, 0x0) read$char_usb(r0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000140)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) r3 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) getgroups(0x8, &(0x7f0000000180)=[0xee01, r1, 0xee01, 0xee00, r2, 0xffffffffffffffff, 0x0, 0xee00]) 03:49:31 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) (async) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'pim6reg0\x00'}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 03:49:31 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4a0a80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) socket(0x28, 0x80001, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:49:31 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x9d3b29af2fdd3ff4, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x40, 0x2, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0x4, 0x3, 0x7f, 0x0, "f23df6ac"}, 0x9}) 03:49:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x4, 0x0) read$char_usb(r0, 0x0, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000140)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) r3 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) (async) shmctl$SHM_LOCK(r3, 0xb) (async) getgroups(0x8, &(0x7f0000000180)=[0xee01, r1, 0xee01, 0xee00, r2, 0xffffffffffffffff, 0x0, 0xee00]) 03:49:31 executing program 3: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) 03:49:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 03:49:31 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4a0a80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) socket(0x28, 0x80001, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:49:31 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x9d3b29af2fdd3ff4, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x40, 0x2, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0x4, 0x3, 0x7f, 0x0, "f23df6ac"}, 0x9}) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x9d3b29af2fdd3ff4, &(0x7f0000000040)) (async) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x40, 0x2, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0x4, 0x3, 0x7f, 0x0, "f23df6ac"}, 0x9}) (async) [ 1224.713507] QAT: failed to copy from user cfg_data. 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'pim6reg0\x00'}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 03:49:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) syz_open_dev$video(&(0x7f0000000040), 0x3, 0xb0403) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 03:49:31 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4a0a80, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (rerun: 64) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) socket(0x28, 0x80001, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:49:31 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x4, 0x0) read$char_usb(r0, 0x0, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x8, &(0x7f0000000140)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) (async) r3 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) (async) getgroups(0x8, &(0x7f0000000180)=[0xee01, r1, 0xee01, 0xee00, r2, 0xffffffffffffffff, 0x0, 0xee00]) 03:49:31 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x9d3b29af2fdd3ff4, &(0x7f0000000040)) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x40, 0x2, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0x4, 0x3, 0x7f, 0x0, "f23df6ac"}, 0x9}) (rerun: 32) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'pim6reg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 03:49:31 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) [ 1224.824114] QAT: failed to copy from user cfg_data. 03:49:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "f61b43de2c135eaa", "ef68f90aa5c9ed45d597bee766e081e73d3d64b2050a1f4ad40b52df367e1120", "371e2f2f", "93165607ee72b3d0"}, 0x38) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000600)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000100)=""/192, 0xc0}, &(0x7f0000000200)=0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000500)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x111, 0x6}}, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) openat$cgroup_procs(r4, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r6, 0x40096100, &(0x7f0000000a00)={{&(0x7f0000000980)={'GENERAL\x00', {&(0x7f0000000680)=@adf_dec={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {0x7}}}, {&(0x7f0000000900)={'Accelerator\x00', {&(0x7f0000000840)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000740)=@adf_hex={@format={'Cy', '0', 'RingRx\x00'}, {0x8000}}}}}}}}}, 0x5}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "8f96c30cb9c5347d", "205b2d422553859b3107a45df90caef2", "7a90c65d", "080b057be62b1360"}, 0x28) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r7, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'KERNEL\x00', {}, {&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f0000000340)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"9691618db8c6cc07f74d74eb209f085c2ae5ce730963005b474f21c96bf4a6dc538bb32a70d7306433596149988a942b4876ff985e898d0c308fd014c9f40d86"}}}}}}}}) 03:49:31 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\'+\'\x00', 0xfffffffffffffff9) r0 = pkey_alloc(0x0, 0x6) pkey_free(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 03:49:31 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 03:49:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000000)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}, 0x2}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1224.916854] QAT: failed to copy from user cfg_data. 03:49:31 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x2, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0xfe, 0x0, 0x0, "33deadc3"}}) 03:49:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) syz_open_dev$video(&(0x7f0000000040), 0x3, 0xb0403) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 03:49:32 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\'+\'\x00', 0xfffffffffffffff9) r0 = pkey_alloc(0x0, 0x6) pkey_free(r0) (async) pkey_free(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 03:49:32 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x2, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0xfe, 0x0, 0x0, "33deadc3"}}) 03:49:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "f61b43de2c135eaa", "ef68f90aa5c9ed45d597bee766e081e73d3d64b2050a1f4ad40b52df367e1120", "371e2f2f", "93165607ee72b3d0"}, 0x38) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000600)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000100)=""/192, 0xc0}, &(0x7f0000000200)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000100)=""/192, 0xc0}, &(0x7f0000000200)=0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000500)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x111, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x111, 0x6}}, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) openat$cgroup_procs(r4, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r6, 0x40096100, &(0x7f0000000a00)={{&(0x7f0000000980)={'GENERAL\x00', {&(0x7f0000000680)=@adf_dec={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {0x7}}}, {&(0x7f0000000900)={'Accelerator\x00', {&(0x7f0000000840)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000740)=@adf_hex={@format={'Cy', '0', 'RingRx\x00'}, {0x8000}}}}}}}}}, 0x5}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "8f96c30cb9c5347d", "205b2d422553859b3107a45df90caef2", "7a90c65d", "080b057be62b1360"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "8f96c30cb9c5347d", "205b2d422553859b3107a45df90caef2", "7a90c65d", "080b057be62b1360"}, 0x28) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r7, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'KERNEL\x00', {}, {&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f0000000340)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"9691618db8c6cc07f74d74eb209f085c2ae5ce730963005b474f21c96bf4a6dc538bb32a70d7306433596149988a942b4876ff985e898d0c308fd014c9f40d86"}}}}}}}}) 03:49:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x1000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 03:49:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000000)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}, 0x2}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000000)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}, 0x2}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) [ 1225.134331] QAT: Device 2 not found [ 1225.138901] QAT: failed to copy from user cfg_data. 03:49:32 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\'+\'\x00', 0xfffffffffffffff9) (async) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\'+\'\x00', 0xfffffffffffffff9) r0 = pkey_alloc(0x0, 0x6) pkey_free(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 03:49:32 executing program 2: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x2, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0xfe, 0x0, 0x0, "33deadc3"}}) 03:49:32 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) syz_open_dev$video(&(0x7f0000000040), 0x3, 0xb0403) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) (async) syz_open_dev$video(&(0x7f0000000040), 0x3, 0xb0403) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) 03:49:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x1000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000020000000300000002000000ffffffffff030000070000000700000001000000fdffffff01000000960b000001800000020000000000000001000000010000000104000040000000000000000004000009000000fdffffff0000008081000000018000000900000007000000df00000000000000030000006334000005000000040000000300000014000000070000000000000081fdffff780d0000040000000000eaffff0100005a0000000700000009000000080000000900000003000000ff0300000400000007000000040000000400000000040000a3070000"]) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 03:49:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "f61b43de2c135eaa", "ef68f90aa5c9ed45d597bee766e081e73d3d64b2050a1f4ad40b52df367e1120", "371e2f2f", "93165607ee72b3d0"}, 0x38) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000000300)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000600)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000100)=""/192, 0xc0}, &(0x7f0000000200)=0x40) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000500)=0x4) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x111, 0x6}}, 0x20) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) (async) openat$cgroup_procs(r4, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r6, 0x40096100, &(0x7f0000000a00)={{&(0x7f0000000980)={'GENERAL\x00', {&(0x7f0000000680)=@adf_dec={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {0x7}}}, {&(0x7f0000000900)={'Accelerator\x00', {&(0x7f0000000840)=@adf_hex={@normal='NumberCyInstances\x00', {0x3}, {&(0x7f0000000740)=@adf_hex={@format={'Cy', '0', 'RingRx\x00'}, {0x8000}}}}}}}}}, 0x5}) (async) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "8f96c30cb9c5347d", "205b2d422553859b3107a45df90caef2", "7a90c65d", "080b057be62b1360"}, 0x28) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r7, 0x40096100, &(0x7f0000000480)={{&(0x7f0000000400)={'KERNEL\x00', {}, {&(0x7f0000000280)={'Accelerator0\x00', {&(0x7f0000000340)=@adf_str={@bank={'Bank', '1', 'CoreAffinity\x00'}, {"9691618db8c6cc07f74d74eb209f085c2ae5ce730963005b474f21c96bf4a6dc538bb32a70d7306433596149988a942b4876ff985e898d0c308fd014c9f40d86"}}}}}}}}) 03:49:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x1000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) (async) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x1000) (async) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) [ 1225.256727] QAT: Device 2 not found [ 1225.273159] QAT: failed to copy from user cfg_data. 03:49:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$char_usb(r0, 0x0, 0x0) 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000020000000300000002000000ffffffffff030000070000000700000001000000fdffffff01000000960b000001800000020000000000000001000000010000000104000040000000000000000004000009000000fdffffff0000008081000000018000000900000007000000df00000000000000030000006334000005000000040000000300000014000000070000000000000081fdffff780d0000040000000000eaffff0100005a0000000700000009000000080000000900000003000000ff0300000400000007000000040000000400000000040000a3070000"]) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000020000000300000002000000ffffffffff030000070000000700000001000000fdffffff01000000960b000001800000020000000000000001000000010000000104000040000000000000000004000009000000fdffffff0000008081000000018000000900000007000000df00000000000000030000006334000005000000040000000300000014000000070000000000000081fdffff780d0000040000000000eaffff0100005a0000000700000009000000080000000900000003000000ff0300000400000007000000040000000400000000040000a3070000"]) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) [ 1225.310387] QAT: Device 2 not found 03:49:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000003, 0x169581) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000814) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:32 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000000)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}, 0x2}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}, {&(0x7f0000000000)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}}}}}}}, 0x2}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1225.334838] QAT: failed to copy from user cfg_data. 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000020000000300000002000000ffffffffff030000070000000700000001000000fdffffff01000000960b000001800000020000000000000001000000010000000104000040000000000000000004000009000000fdffffff0000008081000000018000000900000007000000df00000000000000030000006334000005000000040000000300000014000000070000000000000081fdffff780d0000040000000000eaffff0100005a0000000700000009000000080000000900000003000000ff0300000400000007000000040000000400000000040000a3070000"]) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 03:49:32 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) 03:49:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) read$char_usb(r0, 0x0, 0x0) 03:49:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000003, 0x169581) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000814) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x10000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xff7f, 0x0, 0x7, 0x3f}, 0x8) r2 = msgget(0x3, 0x104) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f0000000300)=@adf_str={@normal='NumberDcInstances\x00', {"3a1ea75ae85ae2b7cd033577185b7523edfa2c51521e133fa83d3f63969c97b33ca98f19332ce88f35766b2a47bf8b05c6f2877a2ca5c1951e9c29d1e717e81c"}, {&(0x7f0000000240)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"2b6a50366a2acd400e76f67146953414822949d6bbbc326d9b860f7e935b3fb32cd5baee679e512d90266e002faec0d7cad61d3d5a452fcc745af9e80e5af808"}}}}}, {&(0x7f0000000140)={'GENERAL\x00', {&(0x7f00000003c0)=@adf_str={@format={'Dc', '1', 'RingAsymTx\x00'}, {"02d2740d31ce794b3ef73ca5de8f22d0a411ab2d3a77c1abfa57c75de71babfea8b4a4ab92c00466d607042ab8d7acd5d3e4904b9314d29344400b4ba88f4858"}}}}}}}, 0x81}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x884) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/94) 03:49:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x100}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2e, 0x0, [0x1, 0x6, 0x4, 0x8, 0x40, 0x400, 0x7, 0x4, 0xa646, 0x7fff, 0x3ff, 0x81, 0x1, 0x65709b, 0x2, 0x4]}, {0x36, 0x0, [0x44, 0x9, 0x4, 0x0, 0x4, 0xfff, 0x400, 0x7f, 0x4, 0x4, 0x20, 0x22, 0x9, 0x1, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) [ 1225.425156] QAT: Device 2 not found [ 1225.438792] QAT: failed to copy from user cfg_data. [ 1225.447353] QAT: Device 2 not found [ 1225.451145] QAT: failed to copy from user cfg_data. 03:49:32 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"b522517dfab55acae9158470c3deacebf437bd113d56b5b64e266798a02c4b84eda3949073ed4bd288277c6588ad46384243fadbbbdfcc9aab04be39d3ba45cf"}, {&(0x7f0000000000)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000300)={'Accelerator\x00', {&(0x7f0000000240)=@adf_dec={@normal='NumberDcInstances\x00', {0x4}, {&(0x7f0000000180)=@adf_dec={@format={'Cy', '5', 'RingAsymRx\x00'}, {0x3}}}}}}}}}, 0x8}) 03:49:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000003, 0x169581) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x26}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000814) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1225.501081] QAT: Device 129 not found 03:49:32 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) 03:49:32 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) read$char_usb(r0, 0x0, 0x0) 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1225.550316] QAT: failed to copy from user cfg_data. 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x100}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2e, 0x0, [0x1, 0x6, 0x4, 0x8, 0x40, 0x400, 0x7, 0x4, 0xa646, 0x7fff, 0x3ff, 0x81, 0x1, 0x65709b, 0x2, 0x4]}, {0x36, 0x0, [0x44, 0x9, 0x4, 0x0, 0x4, 0xfff, 0x400, 0x7f, 0x4, 0x4, 0x20, 0x22, 0x9, 0x1, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) (async) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) [ 1225.586678] QAT: failed to copy from user cfg_data. 03:49:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:32 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x100}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2e, 0x0, [0x1, 0x6, 0x4, 0x8, 0x40, 0x400, 0x7, 0x4, 0xa646, 0x7fff, 0x3ff, 0x81, 0x1, 0x65709b, 0x2, 0x4]}, {0x36, 0x0, [0x44, 0x9, 0x4, 0x0, 0x4, 0xfff, 0x400, 0x7f, 0x4, 0x4, 0x20, 0x22, 0x9, 0x1, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) 03:49:32 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8, 0x3}, @timestamp], 0x2) 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x100}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2e, 0x0, [0x1, 0x6, 0x4, 0x8, 0x40, 0x400, 0x7, 0x4, 0xa646, 0x7fff, 0x3ff, 0x81, 0x1, 0x65709b, 0x2, 0x4]}, {0x36, 0x0, [0x44, 0x9, 0x4, 0x0, 0x4, 0xfff, 0x400, 0x7f, 0x4, 0x4, 0x20, 0x22, 0x9, 0x1, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2e, 0x0, [0x1, 0x6, 0x4, 0x8, 0x40, 0x400, 0x7, 0x4, 0xa646, 0x7fff, 0x3ff, 0x81, 0x1, 0x65709b, 0x2, 0x4]}, {0x36, 0x0, [0x44, 0x9, 0x4, 0x0, 0x4, 0xfff, 0x400, 0x7f, 0x4, 0x4, 0x20, 0x22, 0x9, 0x1, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, 0x0) 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1225.681586] QAT: failed to copy from user cfg_data. 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "de1299e04d54faeb", "f2273e6aa29a99e51ac92e5ef74ec780", "b94619b2", "08c67d1a65f286dd"}, 0x28) 03:49:32 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 03:49:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) 03:49:32 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x8042) 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:49:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x288001) read$char_usb(r1, 0x0, 0x0) [ 1225.778697] QAT: failed to copy from user cfg_data. 03:49:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x20000) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r7}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000800)={0x6, 0x118, 0xfa00, {{0x200, 0x8001, "97ecbc4320d889e7ca6723cb8fb2a02831db54ef060d0c750e47eaa06d2cce1ba2bf6c33ce3e6b6b480a06de6f0f3b887d1032e3213ae217308cc16be0e25e5106c7e460c313b376fd841fab1a66be7f7cd04d444ab8504175ed3ed16fa32856b2eb244fc006b718e26f28492df10e089376a71632166e0e5695cc939ac4f71ba34dc3f4ec02c95decfc91d802542d6569cd00566cdef7ded576e38050fe72b3b534b224bd204f8b53e287a197d6841a1cdf3f05a36eb1e8ce2f166657ff40346fbc5217cb607ee0c51baf62b3f900ea9b07a05d8f9d6542a27e5958a96257606257566018287e5fb11512f176ca3d698743eb57dd3e1c320f1544bff9b58f5f", 0x40, 0x1, 0x8, 0x69, 0x1, 0x20, 0x7f}, r7}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r8}}, 0x38) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r10, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r11}}, 0x38) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0x8, "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", 0x40, 0x2, 0x0, 0x3, 0x3f, 0x4, 0x6, 0x1}, r11}}, 0x120) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r8, 0x1}}, 0x18) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000740)={0x0, 0xa, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x24924924924905c, 0x0, &(0x7f0000000980)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000580)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000640)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r12, 0x6, [0x1, 0x80]}, {0x80000000, r13, 0x1, [0x0, 0x4]}, 0x1, [0x10000]}) read$char_usb(r0, 0x0, 0x0) 03:49:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:32 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x288001) read$char_usb(r1, 0x0, 0x0) (async) read$char_usb(r1, 0x0, 0x0) [ 1225.811964] QAT: failed to copy from user cfg_data. 03:49:32 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x8042) 03:49:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:49:32 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x288001) read$char_usb(r1, 0x0, 0x0) 03:49:32 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x8042) 03:49:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000000)) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1225.921430] QAT: failed to copy from user cfg_data. 03:49:32 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:32 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x8042) [ 1225.999595] QAT: failed to copy from user cfg_data. 03:49:32 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x6, 0x117000) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x4}}, 0x18) r1 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x7fff, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) 03:49:32 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x11}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x50) 03:49:32 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:32 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0x0, 0x8042) 03:49:33 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0x0, 0x8042) 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) (async) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x11}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x50) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = msgget(0x2, 0x443) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/166) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/109) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1226.100183] QAT: failed to copy from user cfg_data. 03:49:33 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) write$char_usb(r1, &(0x7f00000001c0)="2ec6ad9a227ca801378b4d6bd40dbf5db856ea1395cdc631038da8a1ebf33697a7f4f3f3a2803f4712d1f87acdcb5b7b415f022135f86e59de9c6293934d017e95a10da3b0db462d4f963146a60e0a72722a4f5b09fe3b56ccc0020359b83df550298ae72023", 0x66) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x1, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 03:49:33 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf250e0000000f117f002d1a00040443d40000000000000100010013000000010006000000f805dc03b802dda8234df4e29c41aed0b1f5f3b6fcb6722b83b979472d414ec76ddc1ca349f348863e2d0e80797f24b91eb0306e6bb43d96e4fedcd9e6912551771ff96cf089beb0091b16d70c696161d8b42f89b48875cb2d7e229f82228eb82072ae3379463d6b2ed02e414739c77950ef496a976a43825acef4c3a2fe25fec35b80e681906653d77a2b0a83719e7bf6006ae8de0ea264f92efeb283d827a3d77ca4c0a17d41a09c64331d64bb3116d52c9c452866a1a2d94e0c9575bab5d4d766862e7c83bbd59879c77821e02293b27b8a19dcccd9bad2bd9f9e6ad8bebd06080211000000060201002603021f02c7239366d74951a049b8aa3972a4a4b3b51cfdaaab04c3a17eb04d6398eae98ff8adcbe750b227b7ccd215c9cc1f2a996880bffd9825587bdfb96657a9db501e4392b69e8912460e8bb23ca1211feb4fc88dd89b8c9988887387c25cca80bd50765434c0b8b9f82af85c6a0b20ef736239d3755bace7141e85315dd07d81897368bb20b6fbd9fd2dfc8d3b1b726de9aa2f3cd9d2ee645aecb5ef3fe62a8517561dcc6f12a0b33afaffe040ffd2a7ff17dcbea625c01a610c722fcb4131cb923db436673cac92af792dbfa38bb4eea3cbb6f560acd1224cc97817e93e5c38c0d33e8610f18fd6cd46d029d47aeef5b52f4eb0f55e24cc39921f7cbab082655226f6480cbf4cc2f8e8e292b02bc0a7f32c207a188f97bdbe654afd54d93c06eec75e32bd706f64ebc65d7de2418ebbded9d16051db617fa483b401121113538db6bb044e52e01758274136e3d526788923682d8126242c1aea83ef7f8c4eeace2208ab2d5ad63ea118a2ba06433a72a40a4559f0756f896aed1dae59207e4c722ddb8100b7aa7354f03b287a501804c0b782e8349fdab4f7ae5d6bf8f0590951e88709226af73fdb7ae521dfc9a5db8f336cf5d8d973028bef298895c9749ed47d397b40c8b3783ad3bba5a8117e9dfa626bf67ea10325e39fc297560ece374871bf7a975ed2d0e5a84a5e987aa5af0f3bff480981900acccdb0b808e31c53eee32e0033ce85c7a4b637df1d38f12301b65913adc8f06398248427bb17cd63814238b5f0d2456c9425eb787ad795119e678ed6539e92031766517659ae1a498d9c786fcb2a99a3ef81f90e18d5b5733595809b8f7a69d26b036af2a12f3906115046fc93587075cd63a32e28f231f29d833e0655d85e99df20c9f01d9f2d23029cb711404127964037c03378253fa8e5dbad9b7e99dc02ef33aaa180242b6822034a3986bdb121c38361990c1a0f45581a765fa4af0480c74e01a77eaa49622b0587a1b591936c2c834c9494b6b8e8000e50afd7edb0c897c005187526930811621d8cac797a0053e02dfeb3c97bb8e278ad994d85c22dbc9b978945c300bd052d086f5aaa34cb05cbaef1b8db8b1b6acaa1d426f4e8e7d416e502204f038360b5edc14f595aa0ddc5e428b36f05702e38379862c1f591350d3cd5b7d71056e5dcee9ec8e3745f49e78f26f148a4cf79dc4c6dcdeff7d3350efeb4be9b3a07992cdd8c5bdb3c61ba4e951b1d61d62d3231cb5f8c2a152eda1861f70865f81fbafbb6fc76c53d49603c9dac31ac5b0cfcd3fd09eca1c0cc1af539d2448c78cd5ea1e0fced5fb0342a316a8d76a69db58c8b30cb5fabeacc0c4773e0265b04de6760c5a4b97beda5996a0808ebb81ded6d715e7716251afe5a4a32a5b413022b15db905166816104b8d2e880698e2a53c0934b522b872e72aeb04b26ef0dd3cda06981d00345c59ea7a1bc7752ea9e8ff07222e148ceacbfba2f5443ba2d795f99a446e29dd96d23bb90bb8e149fecfee5ccac6b62537f3e409f5d3b3682a74ee2eeb2cff73591db3a806cd54f5c861f91e424f72058ee412df9a098090e9b92b2a7dd803c53b79b896dee1becb0be3bbef3408b554c3ed4863f765032ebc4586f6ae7bb32d196aa53c690dccf9d76968749d20a9a09c855b0b2b3f75b4bf5e9a87543c8348545b04e140351a8faffae62de3c6f7656311c3795230bbcb0adaf05d287c424cf20b730af769cd2574da161a5671b7c1814ccc5635a26a819db1f8a25829fb93ebc5b351a7dabcbf4bbe707c3770eea42845038637369a595f64d570accd210dda8f1f60f4a5840fe522be716c8258007c68deda9493a219c4cca947713d872db3bd84306c3e9f973157a6eea531dd04da104e3c0a831b4a7a8fd60035858e4dd53d21e6d9e1105b13a89c690870054ba624e76d209b1984f1a8c4d9a537fa15423f30cdbea5973942a065d547b0375243b8cb26f6f0e6bf0331ff1abb490e4afec1b9a6a6729c0385cf290a6034a7d2762ccb78f9b48b3dff35c7375e89aed0f69113d40d8a540ff1a6ec5f5e310b72b587abf4cc8c2ece20299db406b984ab3b8ec6bcdb0416c93dedfe0d03213ee3afdfbcf92a77e01cb77089d17a1dee0ba617509620f8bd30325d8f3872e6e417a0ad6506eedc23844c11a88e7bf646e9b77ae82a2f0ea0f424a83d888d62c7dfaaab4386af070b344dcba8cacba82a06dad5ff7f6b234f23e89ba3bf3ef2afe8dda952376ac78fcfb9f2b55fe3bba9f31515ad7cb4112bfdffa6891ab5584e0124f028369948d1ed87fdaf247618a451a580af032495c9b37de0aff707b9c4d4d14dd23601fa586ecf4c3aaa33618dde247f61c6dfd83ad57ee19ec9d1617e364ee2dbbf8a69eab67863ee04375fa7f0f029d4c2365eaa539ff8541986d08f3db50960bded8e1b3db91cc15a2751f646fc7e2e7ad68b472ab1ec08c1bcbc0e489883e2be11de32d31ec4d4ac88c64e585e551c1606e761c7862ff5170213ce7a80f1127bd5a6ad6c8eccd4d365063f3862a58ea54c095bd37f324f9c55636bb9fb8af43a6aead9bbdf14f56604cfbfb9eb2da64af06c2c801e63e5ff4c8379ab53a72c2521c5b4ece5e14dfbd93a868bae80fb0a021786cb7e3a6efcd0d26fd23828abd4a34e6a7b62c52735d7e656289044512cdc2d48c710466f1bb6de1920ba746b4396d6bf8e80273821248ee78892658e4e64918199c6762adfec106657fe72ab7c59fb22b56554f1d45f6faf437370c9b5a0aab50e5f14cce6743cab5e15d786f56d5fe3abfc64d1f94180f5d16cf5c72f6374b76dee1ef2091a5eb439ffb795257bcd4a5a6cb106b41abb070d1a522a9930bdd1b89237df44d130a8b48529de15da921560fd4d574390b0f4b51ba4c51ff629a69f037b2c33047078e4c01eaa5b316ad78bfd1ce64645da1e9748b237cf4e71b40799cd22088743b35f999826c0b2d088e3f09845601d2a8f2fc2a44d5d2ddef5f73a6529c0e2cd4237291397e9d6359bc2ed16b8daf317bc275d2042dae354428f13904da498afb600c3e3db0023e7619692b9013ac3d0e4f3f6a9e3c666e60a982a23e67713c467b521e49ce915f4614b8c8bd61e9b86038b7d9bff6f8d75e9126bee6fb73c9d70d4439ba762fe82884cfc0e3942ff288e40eec4dabb8b3703519c9c5bd9b31655c71f4f2bd929bbe386aa18c9256a982ce8b9517e750db6a2b93c0b7ae82588e145efe601b4f32b645a1c704c06a4893198de59fc146484e5b5695156ee242feeb9ce8c52a2ae11675fbbc4d543950ab77552fe9980e68895897805de93025412a71b2b7049ad7154c2cc7e69badec59c01b4b5be2da814981f03e5bf4773eba51010e52022f3cb4b84c41f489ec71205a4dcb7c8e3f332091af53ca31e4e5ed1b7a2516aadb5bd0021a418f652644869912e7a2ecb6c50677ffa78b84dbe4d8c38ab22df058c1bc2f089781fcfa1aa4016462ceeaf009cbfdf75fb78a6f10b684ba41970a2bde7e15bd78324479d92c60118a4b873904749a8835b29f021185948c54a0871824ac59388d4bd80689a9ef83cad9d907aab45b9fcd4f8b535d0f01b6b54cdc860206c081e3ddfca57d4dc54b6b9abb25fb829c36ee966b0435fd74770655f69644820d21a3b4aa86f19f15baf95abb627558f457eadddefa24944a72cf814054e20d2f24a7ec9f94e09513cf945c4b0f78f39e70a9bb34aeb777a113b82cb88bfcd85956c6b39400878a0b0b4e5f5264c9a6a4f0fe0425d0f4ff6d5c38712fa4ecace0627db82f8e85cf61a69da10a92f69c4a9eec6217d9617a80339454ad19bf53458084fe8d5784d6d4eece8700ce482130d65b339028cf3d17929ee16c4d4ac5facf63ed66bcead22b56bf6f453f7007704ec2527bcf7539399e4f3a4dc5af1ddec518485fdd1060c5ff2b9006f579cd2ffb76f4bd144c05fc0dcd986a384dbf6c235c2f3944b395c6db75ac44b4e5942d7e68de50c67c8a91ff06e2caa34e7f515d1a83c65e8d1a0b61c5b20ea9077a9cd7e7604fdcec4e110aacb6ec5621aec396e47d34887df21fe08ab6d11cbe0ea1f0db556ef823f5f41130afab7dc6bd9466746a267c41d10586b2797200da572eee6b3495d6ff7226f3d1798a347a3fa2613d523e757c6b559c45d07f972e454360c067e854d0b041145ea23ce2a743c91185880f04332296cb8f772e2f63404484dc7876cb11d6d8e241d0b63d82016d72cae42001482a8be30e2c20a06ddb754d9a95d14ca9064d506c6a4aa1107221b1de2779c0550e4c20413bf013cc261d86519d2443b5d4ea772d1be9c8b2a8d6c67d72efd8b94d6a5edcb78874044ab7ccdae69e4afa375008737fd82332fa51a5b0ad5729f3dd9c1b4b8e1cce18e807860fb986d7e321a65f014cca325560b22923bf67d985dbd1dbe386bd970b7c4e90e66fd091977fa9d52c673cd4237e9085cdd8fbec45e94160acebd5a7ff63f383fce06f5b7ab6480cdca80fb683e879d1a316bb8676152c1f4e8cdb008c6f978d3e1c4d6209c7de241e862462a55e69eb4d5ffbc9eae380d570aab2b4d546b372cdba36c77cd4354ef747032b07bd960a377079fd561de2274294357fe327f16b76efb51401b586c3543dd10d4d4e3ef205c923571b0bacebf277fc413d5a110e13f601da3bd542e074ee55b06611a7a184def5a91a89c3b9fe2dea31e9e37e32fa0e9abe16d1e0083f4905d239fe1a1bb941a2891d258e0f78b8bf482aa34914f82c7ccd632c7ceb569954cbecf7ae20cf6f969637a920d1ef074244ff855c281de0d4b4de81e89e744ebe0b57789faabf20b384275e5a1e81711c226850fdf8631e9e7777d7e84743768f232650c10d06c23efc7685170dbeea5217311fbf6032f3f2a7d4881fd9d63be3fdae50057b0a73a4ca5528a769dbefa2e270474e4541bb581fbedef5b1851c2778716aac27ddf3367898815be8c86948de8335ac023fcc47796f7c11b3a0ccc8b0be86882fbeb46531805752cb93d4d5ff5291aeff59ee1ef4085c200b8d2e5aa484066b979623fa34fdd1a0d158a31db9f0aa96831afaaa077ff26b058ab46a6c33565549161a0fe3e8a1b4ee345fea73aeaf4cb4b08b8d4c8f6a76fa79c259cfbb4c54283c72edd2dcaf4cbd2746ac20f2097dffbef4b24c6b22204dedd8d0f4ecd64bda9b0db98d0148e0c556fdc2c3550f447a915e6aadbc7767ce9e5a944e1dbaf6aea6bb48925414f334d65f44a80c2ed7d1c78c9a221e1ce51959891ca877e349e21f99cc7882a563035f94d3ee79fce0eceadb043b49fefed4d118c4c56100cc1c1d3ca89d08003fa19d5b96d8dc65eda8074c4fb02fe08e3790d820ccc6fc074f19fa53be8e9c9c60407ccc551f5513c74b0b176ff95e7b7051b8367b5ebc7cfb5e55b708d8883291b53fe32fea37793851cdea7609322098195cce257686b5cdf493f800246219ae99bf344e9325c1cc39cc2f10996f65092c056c37c1eda1527ed4e2a8583c55697276049729cd5b681e3d4c29a71e90c1ab7cf713329aaa02ddb39dccd52fdb1e7ad70abad76b0846e836cbcf5fe2511f0f5bcffcc2702afdbb34e787d34a87df865da2bff266ceefda2388acbed1ff49cd2a2b309fba4fa6405e23d2cb3eeed5219ccd1c2dd40c67c3f44dabfa6b44d8511e9f2b6718a7a00c9e602c9aa41d8045ed3a2c155ef9303bbcb41f75f14882172c7eea779d73f46b4649c53647ee4d21e3ef52ec855d3a420ba12746ad76729c24797ba525d11e3aefd56d0072027f002a010782720703010200000008021100000085000000000800000100000008050802110000000500000001ffffffffffff000000000108021100000005000000040802110000000100000001ffffffffffff0010000004ffffffffffff0100000004ffffffffffff050000000108021100000005000000824c40091304000000080211000001ff01000008021100000000000000070000000400080211000001ff03000001080211000000fdffffff04ffffffffffff00000080000802110000010300000000060101010101010006010101010101822500030107000000ffffffffffff0600000007000000070000000105080211000001f40200003793000461a3b06bf1dab248b3b777a677562b67adf19d83eccc3aa3878d7db8e41f97c138bf80bfd00a07b4b9ab6926fbbf96de3145f940f5a510a36564a94e6ee6fe20672be1f9187c9a2ebeb4fbe7c274300c020899a5d834a5d0f081031922ba7e8f128202f4a69a790b1f271e5a5a6cc6c48916ba86a901188703915c7b322d7dabacec406fbc52d3be8eb0741b86ab9d03007206030303030303840f000100080211000000cdc10000100017c205f987e09704e26b7f8549cff767314e655c051695936a3096fa07f5b8527a8ce93f709e5ecffbff8fabf9ff5749a1407956f653fa2b4b83913015eb8f593cc6baf7ece573d53103d96f4b46d6aa1b1f7c567ec2f436ddecf8f7bc96da1a1f8ef8f4bdf502ca7839c423bbb28a403297ef5cf06aad2c83d945dba6754dbf5cafb7d98b18685a426d942bc791fe7591a14335cc1f32ac9f73755f4c31e9ea11a9f372af58c1ad5716d59bd5259e592695a77710c83744f095c30137db663fab8829b80000"], 0x1398}}, 0x2) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = msgget(0x2, 0x443) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/166) (async) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/109) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:33 executing program 3: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 1226.162734] QAT: failed to copy from user cfg_data. 03:49:33 executing program 2: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 1: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x11}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x50) [ 1226.250035] QAT: failed to copy from user cfg_data. 03:49:33 executing program 3: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0x0, 0x8042) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = msgget(0x2, 0x443) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/166) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/109) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1226.270319] QAT: failed to copy from user cfg_data. 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf250e0000000f117f002d1a00040443d40000000000000100010013000000010006000000f805dc03b802dda8234df4e29c41aed0b1f5f3b6fcb6722b83b979472d414ec76ddc1ca349f348863e2d0e80797f24b91eb0306e6bb43d96e4fedcd9e6912551771ff96cf089beb0091b16d70c696161d8b42f89b48875cb2d7e229f82228eb82072ae3379463d6b2ed02e414739c77950ef496a976a43825acef4c3a2fe25fec35b80e681906653d77a2b0a83719e7bf6006ae8de0ea264f92efeb283d827a3d77ca4c0a17d41a09c64331d64bb3116d52c9c452866a1a2d94e0c9575bab5d4d766862e7c83bbd59879c77821e02293b27b8a19dcccd9bad2bd9f9e6ad8bebd06080211000000060201002603021f02c7239366d74951a049b8aa3972a4a4b3b51cfdaaab04c3a17eb04d6398eae98ff8adcbe750b227b7ccd215c9cc1f2a996880bffd9825587bdfb96657a9db501e4392b69e8912460e8bb23ca1211feb4fc88dd89b8c9988887387c25cca80bd50765434c0b8b9f82af85c6a0b20ef736239d3755bace7141e85315dd07d81897368bb20b6fbd9fd2dfc8d3b1b726de9aa2f3cd9d2ee645aecb5ef3fe62a8517561dcc6f12a0b33afaffe040ffd2a7ff17dcbea625c01a610c722fcb4131cb923db436673cac92af792dbfa38bb4eea3cbb6f560acd1224cc97817e93e5c38c0d33e8610f18fd6cd46d029d47aeef5b52f4eb0f55e24cc39921f7cbab082655226f6480cbf4cc2f8e8e292b02bc0a7f32c207a188f97bdbe654afd54d93c06eec75e32bd706f64ebc65d7de2418ebbded9d16051db617fa483b401121113538db6bb044e52e01758274136e3d526788923682d8126242c1aea83ef7f8c4eeace2208ab2d5ad63ea118a2ba06433a72a40a4559f0756f896aed1dae59207e4c722ddb8100b7aa7354f03b287a501804c0b782e8349fdab4f7ae5d6bf8f0590951e88709226af73fdb7ae521dfc9a5db8f336cf5d8d973028bef298895c9749ed47d397b40c8b3783ad3bba5a8117e9dfa626bf67ea10325e39fc297560ece374871bf7a975ed2d0e5a84a5e987aa5af0f3bff480981900acccdb0b808e31c53eee32e0033ce85c7a4b637df1d38f12301b65913adc8f06398248427bb17cd63814238b5f0d2456c9425eb787ad795119e678ed6539e92031766517659ae1a498d9c786fcb2a99a3ef81f90e18d5b5733595809b8f7a69d26b036af2a12f3906115046fc93587075cd63a32e28f231f29d833e0655d85e99df20c9f01d9f2d23029cb711404127964037c03378253fa8e5dbad9b7e99dc02ef33aaa180242b6822034a3986bdb121c38361990c1a0f45581a765fa4af0480c74e01a77eaa49622b0587a1b591936c2c834c9494b6b8e8000e50afd7edb0c897c005187526930811621d8cac797a0053e02dfeb3c97bb8e278ad994d85c22dbc9b978945c300bd052d086f5aaa34cb05cbaef1b8db8b1b6acaa1d426f4e8e7d416e502204f038360b5edc14f595aa0ddc5e428b36f05702e38379862c1f591350d3cd5b7d71056e5dcee9ec8e3745f49e78f26f148a4cf79dc4c6dcdeff7d3350efeb4be9b3a07992cdd8c5bdb3c61ba4e951b1d61d62d3231cb5f8c2a152eda1861f70865f81fbafbb6fc76c53d49603c9dac31ac5b0cfcd3fd09eca1c0cc1af539d2448c78cd5ea1e0fced5fb0342a316a8d76a69db58c8b30cb5fabeacc0c4773e0265b04de6760c5a4b97beda5996a0808ebb81ded6d715e7716251afe5a4a32a5b413022b15db905166816104b8d2e880698e2a53c0934b522b872e72aeb04b26ef0dd3cda06981d00345c59ea7a1bc7752ea9e8ff07222e148ceacbfba2f5443ba2d795f99a446e29dd96d23bb90bb8e149fecfee5ccac6b62537f3e409f5d3b3682a74ee2eeb2cff73591db3a806cd54f5c861f91e424f72058ee412df9a098090e9b92b2a7dd803c53b79b896dee1becb0be3bbef3408b554c3ed4863f765032ebc4586f6ae7bb32d196aa53c690dccf9d76968749d20a9a09c855b0b2b3f75b4bf5e9a87543c8348545b04e140351a8faffae62de3c6f7656311c3795230bbcb0adaf05d287c424cf20b730af769cd2574da161a5671b7c1814ccc5635a26a819db1f8a25829fb93ebc5b351a7dabcbf4bbe707c3770eea42845038637369a595f64d570accd210dda8f1f60f4a5840fe522be716c8258007c68deda9493a219c4cca947713d872db3bd84306c3e9f973157a6eea531dd04da104e3c0a831b4a7a8fd60035858e4dd53d21e6d9e1105b13a89c690870054ba624e76d209b1984f1a8c4d9a537fa15423f30cdbea5973942a065d547b0375243b8cb26f6f0e6bf0331ff1abb490e4afec1b9a6a6729c0385cf290a6034a7d2762ccb78f9b48b3dff35c7375e89aed0f69113d40d8a540ff1a6ec5f5e310b72b587abf4cc8c2ece20299db406b984ab3b8ec6bcdb0416c93dedfe0d03213ee3afdfbcf92a77e01cb77089d17a1dee0ba617509620f8bd30325d8f3872e6e417a0ad6506eedc23844c11a88e7bf646e9b77ae82a2f0ea0f424a83d888d62c7dfaaab4386af070b344dcba8cacba82a06dad5ff7f6b234f23e89ba3bf3ef2afe8dda952376ac78fcfb9f2b55fe3bba9f31515ad7cb4112bfdffa6891ab5584e0124f028369948d1ed87fdaf247618a451a580af032495c9b37de0aff707b9c4d4d14dd23601fa586ecf4c3aaa33618dde247f61c6dfd83ad57ee19ec9d1617e364ee2dbbf8a69eab67863ee04375fa7f0f029d4c2365eaa539ff8541986d08f3db50960bded8e1b3db91cc15a2751f646fc7e2e7ad68b472ab1ec08c1bcbc0e489883e2be11de32d31ec4d4ac88c64e585e551c1606e761c7862ff5170213ce7a80f1127bd5a6ad6c8eccd4d365063f3862a58ea54c095bd37f324f9c55636bb9fb8af43a6aead9bbdf14f56604cfbfb9eb2da64af06c2c801e63e5ff4c8379ab53a72c2521c5b4ece5e14dfbd93a868bae80fb0a021786cb7e3a6efcd0d26fd23828abd4a34e6a7b62c52735d7e656289044512cdc2d48c710466f1bb6de1920ba746b4396d6bf8e80273821248ee78892658e4e64918199c6762adfec106657fe72ab7c59fb22b56554f1d45f6faf437370c9b5a0aab50e5f14cce6743cab5e15d786f56d5fe3abfc64d1f94180f5d16cf5c72f6374b76dee1ef2091a5eb439ffb795257bcd4a5a6cb106b41abb070d1a522a9930bdd1b89237df44d130a8b48529de15da921560fd4d574390b0f4b51ba4c51ff629a69f037b2c33047078e4c01eaa5b316ad78bfd1ce64645da1e9748b237cf4e71b40799cd22088743b35f999826c0b2d088e3f09845601d2a8f2fc2a44d5d2ddef5f73a6529c0e2cd4237291397e9d6359bc2ed16b8daf317bc275d2042dae354428f13904da498afb600c3e3db0023e7619692b9013ac3d0e4f3f6a9e3c666e60a982a23e67713c467b521e49ce915f4614b8c8bd61e9b86038b7d9bff6f8d75e9126bee6fb73c9d70d4439ba762fe82884cfc0e3942ff288e40eec4dabb8b3703519c9c5bd9b31655c71f4f2bd929bbe386aa18c9256a982ce8b9517e750db6a2b93c0b7ae82588e145efe601b4f32b645a1c704c06a4893198de59fc146484e5b5695156ee242feeb9ce8c52a2ae11675fbbc4d543950ab77552fe9980e68895897805de93025412a71b2b7049ad7154c2cc7e69badec59c01b4b5be2da814981f03e5bf4773eba51010e52022f3cb4b84c41f489ec71205a4dcb7c8e3f332091af53ca31e4e5ed1b7a2516aadb5bd0021a418f652644869912e7a2ecb6c50677ffa78b84dbe4d8c38ab22df058c1bc2f089781fcfa1aa4016462ceeaf009cbfdf75fb78a6f10b684ba41970a2bde7e15bd78324479d92c60118a4b873904749a8835b29f021185948c54a0871824ac59388d4bd80689a9ef83cad9d907aab45b9fcd4f8b535d0f01b6b54cdc860206c081e3ddfca57d4dc54b6b9abb25fb829c36ee966b0435fd74770655f69644820d21a3b4aa86f19f15baf95abb627558f457eadddefa24944a72cf814054e20d2f24a7ec9f94e09513cf945c4b0f78f39e70a9bb34aeb777a113b82cb88bfcd85956c6b39400878a0b0b4e5f5264c9a6a4f0fe0425d0f4ff6d5c38712fa4ecace0627db82f8e85cf61a69da10a92f69c4a9eec6217d9617a80339454ad19bf53458084fe8d5784d6d4eece8700ce482130d65b339028cf3d17929ee16c4d4ac5facf63ed66bcead22b56bf6f453f7007704ec2527bcf7539399e4f3a4dc5af1ddec518485fdd1060c5ff2b9006f579cd2ffb76f4bd144c05fc0dcd986a384dbf6c235c2f3944b395c6db75ac44b4e5942d7e68de50c67c8a91ff06e2caa34e7f515d1a83c65e8d1a0b61c5b20ea9077a9cd7e7604fdcec4e110aacb6ec5621aec396e47d34887df21fe08ab6d11cbe0ea1f0db556ef823f5f41130afab7dc6bd9466746a267c41d10586b2797200da572eee6b3495d6ff7226f3d1798a347a3fa2613d523e757c6b559c45d07f972e454360c067e854d0b041145ea23ce2a743c91185880f04332296cb8f772e2f63404484dc7876cb11d6d8e241d0b63d82016d72cae42001482a8be30e2c20a06ddb754d9a95d14ca9064d506c6a4aa1107221b1de2779c0550e4c20413bf013cc261d86519d2443b5d4ea772d1be9c8b2a8d6c67d72efd8b94d6a5edcb78874044ab7ccdae69e4afa375008737fd82332fa51a5b0ad5729f3dd9c1b4b8e1cce18e807860fb986d7e321a65f014cca325560b22923bf67d985dbd1dbe386bd970b7c4e90e66fd091977fa9d52c673cd4237e9085cdd8fbec45e94160acebd5a7ff63f383fce06f5b7ab6480cdca80fb683e879d1a316bb8676152c1f4e8cdb008c6f978d3e1c4d6209c7de241e862462a55e69eb4d5ffbc9eae380d570aab2b4d546b372cdba36c77cd4354ef747032b07bd960a377079fd561de2274294357fe327f16b76efb51401b586c3543dd10d4d4e3ef205c923571b0bacebf277fc413d5a110e13f601da3bd542e074ee55b06611a7a184def5a91a89c3b9fe2dea31e9e37e32fa0e9abe16d1e0083f4905d239fe1a1bb941a2891d258e0f78b8bf482aa34914f82c7ccd632c7ceb569954cbecf7ae20cf6f969637a920d1ef074244ff855c281de0d4b4de81e89e744ebe0b57789faabf20b384275e5a1e81711c226850fdf8631e9e7777d7e84743768f232650c10d06c23efc7685170dbeea5217311fbf6032f3f2a7d4881fd9d63be3fdae50057b0a73a4ca5528a769dbefa2e270474e4541bb581fbedef5b1851c2778716aac27ddf3367898815be8c86948de8335ac023fcc47796f7c11b3a0ccc8b0be86882fbeb46531805752cb93d4d5ff5291aeff59ee1ef4085c200b8d2e5aa484066b979623fa34fdd1a0d158a31db9f0aa96831afaaa077ff26b058ab46a6c33565549161a0fe3e8a1b4ee345fea73aeaf4cb4b08b8d4c8f6a76fa79c259cfbb4c54283c72edd2dcaf4cbd2746ac20f2097dffbef4b24c6b22204dedd8d0f4ecd64bda9b0db98d0148e0c556fdc2c3550f447a915e6aadbc7767ce9e5a944e1dbaf6aea6bb48925414f334d65f44a80c2ed7d1c78c9a221e1ce51959891ca877e349e21f99cc7882a563035f94d3ee79fce0eceadb043b49fefed4d118c4c56100cc1c1d3ca89d08003fa19d5b96d8dc65eda8074c4fb02fe08e3790d820ccc6fc074f19fa53be8e9c9c60407ccc551f5513c74b0b176ff95e7b7051b8367b5ebc7cfb5e55b708d8883291b53fe32fea37793851cdea7609322098195cce257686b5cdf493f800246219ae99bf344e9325c1cc39cc2f10996f65092c056c37c1eda1527ed4e2a8583c55697276049729cd5b681e3d4c29a71e90c1ab7cf713329aaa02ddb39dccd52fdb1e7ad70abad76b0846e836cbcf5fe2511f0f5bcffcc2702afdbb34e787d34a87df865da2bff266ceefda2388acbed1ff49cd2a2b309fba4fa6405e23d2cb3eeed5219ccd1c2dd40c67c3f44dabfa6b44d8511e9f2b6718a7a00c9e602c9aa41d8045ed3a2c155ef9303bbcb41f75f14882172c7eea779d73f46b4649c53647ee4d21e3ef52ec855d3a420ba12746ad76729c24797ba525d11e3aefd56d0072027f002a010782720703010200000008021100000085000000000800000100000008050802110000000500000001ffffffffffff000000000108021100000005000000040802110000000100000001ffffffffffff0010000004ffffffffffff0100000004ffffffffffff050000000108021100000005000000824c40091304000000080211000001ff01000008021100000000000000070000000400080211000001ff03000001080211000000fdffffff04ffffffffffff00000080000802110000010300000000060101010101010006010101010101822500030107000000ffffffffffff0600000007000000070000000105080211000001f40200003793000461a3b06bf1dab248b3b777a677562b67adf19d83eccc3aa3878d7db8e41f97c138bf80bfd00a07b4b9ab6926fbbf96de3145f940f5a510a36564a94e6ee6fe20672be1f9187c9a2ebeb4fbe7c274300c020899a5d834a5d0f081031922ba7e8f128202f4a69a790b1f271e5a5a6cc6c48916ba86a901188703915c7b322d7dabacec406fbc52d3be8eb0741b86ab9d03007206030303030303840f000100080211000000cdc10000100017c205f987e09704e26b7f8549cff767314e655c051695936a3096fa07f5b8527a8ce93f709e5ecffbff8fabf9ff5749a1407956f653fa2b4b83913015eb8f593cc6baf7ece573d53103d96f4b46d6aa1b1f7c567ec2f436ddecf8f7bc96da1a1f8ef8f4bdf502ca7839c423bbb28a403297ef5cf06aad2c83d945dba6754dbf5cafb7d98b18685a426d942bc791fe7591a14335cc1f32ac9f73755f4c31e9ea11a9f372af58c1ad5716d59bd5259e592695a77710c83744f095c30137db663fab8829b80000"], 0x1398}}, 0x2) 03:49:33 executing program 0: syz_open_dev$video(&(0x7f0000000080), 0x0, 0x8042) 03:49:33 executing program 3: r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) [ 1226.350544] QAT: failed to copy from user cfg_data. 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) socket(0x9, 0xa, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@format={'Cy', '0', 'RingAsymTx\x00'}, {"d52bafa457737a130f0c75c8cb2adbefdff905c648ac774ecfcb7679283857956d122977d1ad11fa74e7a2d3a1bce47ba0ca815e65b4948ebdf7555c773cd63a"}}}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_str={@normal='NumberDcInstances\x00', {"3ca9dfd5a16c54dfe3792c69e36d2f25f44e8a1f651a9d11571e3c9f81dcad672281b0af4b66ede29988a2ba7315671973b17fb9de116f49df3f96da0bc737fd"}}}}}}}, 0xc1}) 03:49:33 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000000)={{0x80000000, 0x0, 0x4, [0x100, 0x1000]}, {0x80000000, 0x0, 0x4, [0x12, 0x80000000]}, 0x2, [0x7fff, 0xfff]}) read$char_usb(r0, 0x0, 0x0) 03:49:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:49:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf250e0000000f117f002d1a00040443d40000000000000100010013000000010006000000f805dc03b802dda8234df4e29c41aed0b1f5f3b6fcb6722b83b979472d414ec76ddc1ca349f348863e2d0e80797f24b91eb0306e6bb43d96e4fedcd9e6912551771ff96cf089beb0091b16d70c696161d8b42f89b48875cb2d7e229f82228eb82072ae3379463d6b2ed02e414739c77950ef496a976a43825acef4c3a2fe25fec35b80e681906653d77a2b0a83719e7bf6006ae8de0ea264f92efeb283d827a3d77ca4c0a17d41a09c64331d64bb3116d52c9c452866a1a2d94e0c9575bab5d4d766862e7c83bbd59879c77821e02293b27b8a19dcccd9bad2bd9f9e6ad8bebd06080211000000060201002603021f02c7239366d74951a049b8aa3972a4a4b3b51cfdaaab04c3a17eb04d6398eae98ff8adcbe750b227b7ccd215c9cc1f2a996880bffd9825587bdfb96657a9db501e4392b69e8912460e8bb23ca1211feb4fc88dd89b8c9988887387c25cca80bd50765434c0b8b9f82af85c6a0b20ef736239d3755bace7141e85315dd07d81897368bb20b6fbd9fd2dfc8d3b1b726de9aa2f3cd9d2ee645aecb5ef3fe62a8517561dcc6f12a0b33afaffe040ffd2a7ff17dcbea625c01a610c722fcb4131cb923db436673cac92af792dbfa38bb4eea3cbb6f560acd1224cc97817e93e5c38c0d33e8610f18fd6cd46d029d47aeef5b52f4eb0f55e24cc39921f7cbab082655226f6480cbf4cc2f8e8e292b02bc0a7f32c207a188f97bdbe654afd54d93c06eec75e32bd706f64ebc65d7de2418ebbded9d16051db617fa483b401121113538db6bb044e52e01758274136e3d526788923682d8126242c1aea83ef7f8c4eeace2208ab2d5ad63ea118a2ba06433a72a40a4559f0756f896aed1dae59207e4c722ddb8100b7aa7354f03b287a501804c0b782e8349fdab4f7ae5d6bf8f0590951e88709226af73fdb7ae521dfc9a5db8f336cf5d8d973028bef298895c9749ed47d397b40c8b3783ad3bba5a8117e9dfa626bf67ea10325e39fc297560ece374871bf7a975ed2d0e5a84a5e987aa5af0f3bff480981900acccdb0b808e31c53eee32e0033ce85c7a4b637df1d38f12301b65913adc8f06398248427bb17cd63814238b5f0d2456c9425eb787ad795119e678ed6539e92031766517659ae1a498d9c786fcb2a99a3ef81f90e18d5b5733595809b8f7a69d26b036af2a12f3906115046fc93587075cd63a32e28f231f29d833e0655d85e99df20c9f01d9f2d23029cb711404127964037c03378253fa8e5dbad9b7e99dc02ef33aaa180242b6822034a3986bdb121c38361990c1a0f45581a765fa4af0480c74e01a77eaa49622b0587a1b591936c2c834c9494b6b8e8000e50afd7edb0c897c005187526930811621d8cac797a0053e02dfeb3c97bb8e278ad994d85c22dbc9b978945c300bd052d086f5aaa34cb05cbaef1b8db8b1b6acaa1d426f4e8e7d416e502204f038360b5edc14f595aa0ddc5e428b36f05702e38379862c1f591350d3cd5b7d71056e5dcee9ec8e3745f49e78f26f148a4cf79dc4c6dcdeff7d3350efeb4be9b3a07992cdd8c5bdb3c61ba4e951b1d61d62d3231cb5f8c2a152eda1861f70865f81fbafbb6fc76c53d49603c9dac31ac5b0cfcd3fd09eca1c0cc1af539d2448c78cd5ea1e0fced5fb0342a316a8d76a69db58c8b30cb5fabeacc0c4773e0265b04de6760c5a4b97beda5996a0808ebb81ded6d715e7716251afe5a4a32a5b413022b15db905166816104b8d2e880698e2a53c0934b522b872e72aeb04b26ef0dd3cda06981d00345c59ea7a1bc7752ea9e8ff07222e148ceacbfba2f5443ba2d795f99a446e29dd96d23bb90bb8e149fecfee5ccac6b62537f3e409f5d3b3682a74ee2eeb2cff73591db3a806cd54f5c861f91e424f72058ee412df9a098090e9b92b2a7dd803c53b79b896dee1becb0be3bbef3408b554c3ed4863f765032ebc4586f6ae7bb32d196aa53c690dccf9d76968749d20a9a09c855b0b2b3f75b4bf5e9a87543c8348545b04e140351a8faffae62de3c6f7656311c3795230bbcb0adaf05d287c424cf20b730af769cd2574da161a5671b7c1814ccc5635a26a819db1f8a25829fb93ebc5b351a7dabcbf4bbe707c3770eea42845038637369a595f64d570accd210dda8f1f60f4a5840fe522be716c8258007c68deda9493a219c4cca947713d872db3bd84306c3e9f973157a6eea531dd04da104e3c0a831b4a7a8fd60035858e4dd53d21e6d9e1105b13a89c690870054ba624e76d209b1984f1a8c4d9a537fa15423f30cdbea5973942a065d547b0375243b8cb26f6f0e6bf0331ff1abb490e4afec1b9a6a6729c0385cf290a6034a7d2762ccb78f9b48b3dff35c7375e89aed0f69113d40d8a540ff1a6ec5f5e310b72b587abf4cc8c2ece20299db406b984ab3b8ec6bcdb0416c93dedfe0d03213ee3afdfbcf92a77e01cb77089d17a1dee0ba617509620f8bd30325d8f3872e6e417a0ad6506eedc23844c11a88e7bf646e9b77ae82a2f0ea0f424a83d888d62c7dfaaab4386af070b344dcba8cacba82a06dad5ff7f6b234f23e89ba3bf3ef2afe8dda952376ac78fcfb9f2b55fe3bba9f31515ad7cb4112bfdffa6891ab5584e0124f028369948d1ed87fdaf247618a451a580af032495c9b37de0aff707b9c4d4d14dd23601fa586ecf4c3aaa33618dde247f61c6dfd83ad57ee19ec9d1617e364ee2dbbf8a69eab67863ee04375fa7f0f029d4c2365eaa539ff8541986d08f3db50960bded8e1b3db91cc15a2751f646fc7e2e7ad68b472ab1ec08c1bcbc0e489883e2be11de32d31ec4d4ac88c64e585e551c1606e761c7862ff5170213ce7a80f1127bd5a6ad6c8eccd4d365063f3862a58ea54c095bd37f324f9c55636bb9fb8af43a6aead9bbdf14f56604cfbfb9eb2da64af06c2c801e63e5ff4c8379ab53a72c2521c5b4ece5e14dfbd93a868bae80fb0a021786cb7e3a6efcd0d26fd23828abd4a34e6a7b62c52735d7e656289044512cdc2d48c710466f1bb6de1920ba746b4396d6bf8e80273821248ee78892658e4e64918199c6762adfec106657fe72ab7c59fb22b56554f1d45f6faf437370c9b5a0aab50e5f14cce6743cab5e15d786f56d5fe3abfc64d1f94180f5d16cf5c72f6374b76dee1ef2091a5eb439ffb795257bcd4a5a6cb106b41abb070d1a522a9930bdd1b89237df44d130a8b48529de15da921560fd4d574390b0f4b51ba4c51ff629a69f037b2c33047078e4c01eaa5b316ad78bfd1ce64645da1e9748b237cf4e71b40799cd22088743b35f999826c0b2d088e3f09845601d2a8f2fc2a44d5d2ddef5f73a6529c0e2cd4237291397e9d6359bc2ed16b8daf317bc275d2042dae354428f13904da498afb600c3e3db0023e7619692b9013ac3d0e4f3f6a9e3c666e60a982a23e67713c467b521e49ce915f4614b8c8bd61e9b86038b7d9bff6f8d75e9126bee6fb73c9d70d4439ba762fe82884cfc0e3942ff288e40eec4dabb8b3703519c9c5bd9b31655c71f4f2bd929bbe386aa18c9256a982ce8b9517e750db6a2b93c0b7ae82588e145efe601b4f32b645a1c704c06a4893198de59fc146484e5b5695156ee242feeb9ce8c52a2ae11675fbbc4d543950ab77552fe9980e68895897805de93025412a71b2b7049ad7154c2cc7e69badec59c01b4b5be2da814981f03e5bf4773eba51010e52022f3cb4b84c41f489ec71205a4dcb7c8e3f332091af53ca31e4e5ed1b7a2516aadb5bd0021a418f652644869912e7a2ecb6c50677ffa78b84dbe4d8c38ab22df058c1bc2f089781fcfa1aa4016462ceeaf009cbfdf75fb78a6f10b684ba41970a2bde7e15bd78324479d92c60118a4b873904749a8835b29f021185948c54a0871824ac59388d4bd80689a9ef83cad9d907aab45b9fcd4f8b535d0f01b6b54cdc860206c081e3ddfca57d4dc54b6b9abb25fb829c36ee966b0435fd74770655f69644820d21a3b4aa86f19f15baf95abb627558f457eadddefa24944a72cf814054e20d2f24a7ec9f94e09513cf945c4b0f78f39e70a9bb34aeb777a113b82cb88bfcd85956c6b39400878a0b0b4e5f5264c9a6a4f0fe0425d0f4ff6d5c38712fa4ecace0627db82f8e85cf61a69da10a92f69c4a9eec6217d9617a80339454ad19bf53458084fe8d5784d6d4eece8700ce482130d65b339028cf3d17929ee16c4d4ac5facf63ed66bcead22b56bf6f453f7007704ec2527bcf7539399e4f3a4dc5af1ddec518485fdd1060c5ff2b9006f579cd2ffb76f4bd144c05fc0dcd986a384dbf6c235c2f3944b395c6db75ac44b4e5942d7e68de50c67c8a91ff06e2caa34e7f515d1a83c65e8d1a0b61c5b20ea9077a9cd7e7604fdcec4e110aacb6ec5621aec396e47d34887df21fe08ab6d11cbe0ea1f0db556ef823f5f41130afab7dc6bd9466746a267c41d10586b2797200da572eee6b3495d6ff7226f3d1798a347a3fa2613d523e757c6b559c45d07f972e454360c067e854d0b041145ea23ce2a743c91185880f04332296cb8f772e2f63404484dc7876cb11d6d8e241d0b63d82016d72cae42001482a8be30e2c20a06ddb754d9a95d14ca9064d506c6a4aa1107221b1de2779c0550e4c20413bf013cc261d86519d2443b5d4ea772d1be9c8b2a8d6c67d72efd8b94d6a5edcb78874044ab7ccdae69e4afa375008737fd82332fa51a5b0ad5729f3dd9c1b4b8e1cce18e807860fb986d7e321a65f014cca325560b22923bf67d985dbd1dbe386bd970b7c4e90e66fd091977fa9d52c673cd4237e9085cdd8fbec45e94160acebd5a7ff63f383fce06f5b7ab6480cdca80fb683e879d1a316bb8676152c1f4e8cdb008c6f978d3e1c4d6209c7de241e862462a55e69eb4d5ffbc9eae380d570aab2b4d546b372cdba36c77cd4354ef747032b07bd960a377079fd561de2274294357fe327f16b76efb51401b586c3543dd10d4d4e3ef205c923571b0bacebf277fc413d5a110e13f601da3bd542e074ee55b06611a7a184def5a91a89c3b9fe2dea31e9e37e32fa0e9abe16d1e0083f4905d239fe1a1bb941a2891d258e0f78b8bf482aa34914f82c7ccd632c7ceb569954cbecf7ae20cf6f969637a920d1ef074244ff855c281de0d4b4de81e89e744ebe0b57789faabf20b384275e5a1e81711c226850fdf8631e9e7777d7e84743768f232650c10d06c23efc7685170dbeea5217311fbf6032f3f2a7d4881fd9d63be3fdae50057b0a73a4ca5528a769dbefa2e270474e4541bb581fbedef5b1851c2778716aac27ddf3367898815be8c86948de8335ac023fcc47796f7c11b3a0ccc8b0be86882fbeb46531805752cb93d4d5ff5291aeff59ee1ef4085c200b8d2e5aa484066b979623fa34fdd1a0d158a31db9f0aa96831afaaa077ff26b058ab46a6c33565549161a0fe3e8a1b4ee345fea73aeaf4cb4b08b8d4c8f6a76fa79c259cfbb4c54283c72edd2dcaf4cbd2746ac20f2097dffbef4b24c6b22204dedd8d0f4ecd64bda9b0db98d0148e0c556fdc2c3550f447a915e6aadbc7767ce9e5a944e1dbaf6aea6bb48925414f334d65f44a80c2ed7d1c78c9a221e1ce51959891ca877e349e21f99cc7882a563035f94d3ee79fce0eceadb043b49fefed4d118c4c56100cc1c1d3ca89d08003fa19d5b96d8dc65eda8074c4fb02fe08e3790d820ccc6fc074f19fa53be8e9c9c60407ccc551f5513c74b0b176ff95e7b7051b8367b5ebc7cfb5e55b708d8883291b53fe32fea37793851cdea7609322098195cce257686b5cdf493f800246219ae99bf344e9325c1cc39cc2f10996f65092c056c37c1eda1527ed4e2a8583c55697276049729cd5b681e3d4c29a71e90c1ab7cf713329aaa02ddb39dccd52fdb1e7ad70abad76b0846e836cbcf5fe2511f0f5bcffcc2702afdbb34e787d34a87df865da2bff266ceefda2388acbed1ff49cd2a2b309fba4fa6405e23d2cb3eeed5219ccd1c2dd40c67c3f44dabfa6b44d8511e9f2b6718a7a00c9e602c9aa41d8045ed3a2c155ef9303bbcb41f75f14882172c7eea779d73f46b4649c53647ee4d21e3ef52ec855d3a420ba12746ad76729c24797ba525d11e3aefd56d0072027f002a010782720703010200000008021100000085000000000800000100000008050802110000000500000001ffffffffffff000000000108021100000005000000040802110000000100000001ffffffffffff0010000004ffffffffffff0100000004ffffffffffff050000000108021100000005000000824c40091304000000080211000001ff01000008021100000000000000070000000400080211000001ff03000001080211000000fdffffff04ffffffffffff00000080000802110000010300000000060101010101010006010101010101822500030107000000ffffffffffff0600000007000000070000000105080211000001f40200003793000461a3b06bf1dab248b3b777a677562b67adf19d83eccc3aa3878d7db8e41f97c138bf80bfd00a07b4b9ab6926fbbf96de3145f940f5a510a36564a94e6ee6fe20672be1f9187c9a2ebeb4fbe7c274300c020899a5d834a5d0f081031922ba7e8f128202f4a69a790b1f271e5a5a6cc6c48916ba86a901188703915c7b322d7dabacec406fbc52d3be8eb0741b86ab9d03007206030303030303840f000100080211000000cdc10000100017c205f987e09704e26b7f8549cff767314e655c051695936a3096fa07f5b8527a8ce93f709e5ecffbff8fabf9ff5749a1407956f653fa2b4b83913015eb8f593cc6baf7ece573d53103d96f4b46d6aa1b1f7c567ec2f436ddecf8f7bc96da1a1f8ef8f4bdf502ca7839c423bbb28a403297ef5cf06aad2c83d945dba6754dbf5cafb7d98b18685a426d942bc791fe7591a14335cc1f32ac9f73755f4c31e9ea11a9f372af58c1ad5716d59bd5259e592695a77710c83744f095c30137db663fab8829b80000"], 0x1398}}, 0x2) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) socket(0x9, 0xa, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@format={'Cy', '0', 'RingAsymTx\x00'}, {"d52bafa457737a130f0c75c8cb2adbefdff905c648ac774ecfcb7679283857956d122977d1ad11fa74e7a2d3a1bce47ba0ca815e65b4948ebdf7555c773cd63a"}}}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_str={@normal='NumberDcInstances\x00', {"3ca9dfd5a16c54dfe3792c69e36d2f25f44e8a1f651a9d11571e3c9f81dcad672281b0af4b66ede29988a2ba7315671973b17fb9de116f49df3f96da0bc737fd"}}}}}}}, 0xc1}) [ 1226.466051] QAT: failed to copy from user cfg_data. 03:49:33 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000400)={0xfffffffb, 0x2, 0x4, 0x0, 0x7f, {}, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, "ff0100"}, 0x3ff}) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000000)={{0x80000000, 0x0, 0x4, [0x100, 0x1000]}, {0x80000000, 0x0, 0x4, [0x12, 0x80000000]}, 0x2, [0x7fff, 0xfff]}) read$char_usb(r0, 0x0, 0x0) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:33 executing program 3: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 03:49:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) [ 1226.557246] QAT: failed to copy from user cfg_data. 03:49:33 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) socket(0x9, 0xa, 0x4) (async) socket(0x9, 0xa, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000280)={{&(0x7f0000000200)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@format={'Cy', '0', 'RingAsymTx\x00'}, {"d52bafa457737a130f0c75c8cb2adbefdff905c648ac774ecfcb7679283857956d122977d1ad11fa74e7a2d3a1bce47ba0ca815e65b4948ebdf7555c773cd63a"}}}, {&(0x7f0000000180)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_str={@normal='NumberDcInstances\x00', {"3ca9dfd5a16c54dfe3792c69e36d2f25f44e8a1f651a9d11571e3c9f81dcad672281b0af4b66ede29988a2ba7315671973b17fb9de116f49df3f96da0bc737fd"}}}}}}}, 0xc1}) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 03:49:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x303082) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x3f, 0xc, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x2, 0x2, 0x4, 0x6, 0x4, 0x1f, "7a6b7ec0"}, 0x6a5a0000, 0x4, {}, 0x80000000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xa36d}, 0x8) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) 03:49:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000480)={0x3, 0x0, 0x4, 0x400, 0x0, {0x77359400}, {0x5, 0x8, 0x2, 0xe5, 0x2, 0x9, "3309eb67"}, 0xb5, 0x4, {}, 0x101, 0x0, r1}) statx(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file0\x00') openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xb) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='\x00') 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000000)={{0x80000000, 0x0, 0x4, [0x100, 0x1000]}, {0x80000000, 0x0, 0x4, [0x12, 0x80000000]}, 0x2, [0x7fff, 0xfff]}) read$char_usb(r0, 0x0, 0x0) [ 1226.673192] QAT: failed to copy from user cfg_data. 03:49:33 executing program 0: syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, &(0x7f00000000c0)) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x8, 0x1, 0x7fffffff, 0x8, 0x7f, 0x20, 0x2, 0x7, 0x7, 0xc1, 0x80, "3a10fe291ccac8498b2815219164a80df14f2078737fe8ec664d3238f3f1f404"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x9}}, 0x18) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1226.707538] QAT: failed to copy from user cfg_data. 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x109000) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0xffffffff}}, 0x17) 03:49:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x1}}, 0x18) read$char_usb(r0, 0x0, 0x0) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0x0, 0x0, 0x0, '[\x00'}}) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0, @ANYBLOB="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"], 0x1398}}, 0x2) 03:49:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000008c0)={{&(0x7f0000000840)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"b1a452ecf718c239fa19a52309f5d716a92ee2579098698c8eec7f1d88029d55dce9762bbfc13e452507ef0bc18d87f229c9449988b53506a9dcaff733cd186e"}, {&(0x7f00000009c0)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x33989f07}, {&(0x7f0000000b40)=@adf_str={@normal='NumberCyInstances\x00', {"a8a57f44c162304a68bbd95b7d30626be998c6c4602a3d761ec5cdad1ef48a5ef12477147b412f45107cc0e2c6bc9c1977ea6c34087cbcde54b9bcac5b657b24"}, {&(0x7f0000000a80)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}}}}}}}}}, {&(0x7f00000007c0)={'Accelerator\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"dd8100c1297daee1e39de270fda17f685770d891aea67ea6000ced90570204c6106f508d072b662bbc96f48b2fd8dbbdb55f2f9763b90db463160ed0f51dcbb5"}, {&(0x7f0000000640)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000000000009}}}}}}}}}, 0x4}) getgroups(0x4, &(0x7f0000000000)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000040)=[r5, 0x0, 0xee01]) 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x109000) read$char_usb(r0, 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0xffffffff}}, 0x17) 03:49:33 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0x2, 0x4}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7, 0x20, 0x8000, 0x9, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x55, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0x2f, 0x0, [{0x1, 0x11, "c989ccb66c2fc15f182aaa0ca4b659"}, {0x2, 0x7, "ed646d0971"}, {0x2, 0x6, "62379ce1"}, {0x0, 0x8, "ff130480503f"}, {0x5, 0x3, "bf"}]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x8000, 0x101, {{0x16, 0x4, 0x0, 0x32, 0x58, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xaf, 0x1, 0x2, [{@local, 0x4}, {@broadcast, 0xf3da}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@remote, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3}]}, @generic={0x7, 0x4, "68a6"}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000a40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000000cc0)={0x5a4, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x278, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5ee, 0x1, 0x4, 0x26a}, {0xffff, 0x1, 0x8, 0xa507}, {0x0, 0x1, 0x1e, 0x3ff}, {0x8, 0x74, 0x59, 0x400}, {0x8, 0x4, 0xc2, 0x800}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xab8c}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfc00000}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) [ 1226.814413] QAT: failed to copy from user cfg_data. 03:49:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r1 = syz_open_dev$video(&(0x7f0000000080), 0xffbffffffffffff9, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000011c0), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001240)={'sit0\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x101, 0x1ff, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001280)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r2, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], 0x0, 0x8, &(0x7f0000001380)=[{}, {}], 0x10, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000015c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r0, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001640)=[0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000016c0)=[{}], 0x8, 0x10, &(0x7f0000001700), &(0x7f0000001740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001cc0)={&(0x7f0000001180), 0xc, &(0x7f0000001c80)={&(0x7f0000001980)={0x2dc, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400000}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x70000000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/4096, 0x1000) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000000)={0xaa9b, 0xc, 0x4, 0x0, 0x7, {}, {0x2, 0x1, 0x6, 0x6, 0x6, 0x6, "ff39b337"}, 0x1, 0x4, {}, 0x20}) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x8, 0x1, 0x7fffffff, 0x8, 0x7f, 0x20, 0x2, 0x7, 0x7, 0xc1, 0x80, "3a10fe291ccac8498b2815219164a80df14f2078737fe8ec664d3238f3f1f404"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x9}}, 0x18) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x8, 0x1, 0x7fffffff, 0x8, 0x7f, 0x20, 0x2, 0x7, 0x7, 0xc1, 0x80, "3a10fe291ccac8498b2815219164a80df14f2078737fe8ec664d3238f3f1f404"}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x9}}, 0x18) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:33 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000180)={'Accelerator1\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"8edc3580bb5ca07f608e73d88b89328cb601e0c4758f2a1d413aa349dc9640ae50fdb11931b84b1ba2bffe1272d4c5a33b59c187c7c7e5b781d5c4c8d22ec41f"}, {&(0x7f0000000000)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingEnabled\x00'}, {"7d63b6bd809bdc736ca32457dfebe56cbfd17c2a9ea7188d5cb70d0a854ab3f470126dc0c430d4efa51229e9f5f6180c26a5fdfeb69f8c2c6675b8f7fd592c21"}}}}}}}}) 03:49:33 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x109000) read$char_usb(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0xffffffff}}, 0x17) syz_open_dev$video(&(0x7f0000000800), 0x0, 0x109000) (async) read$char_usb(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0xffffffff}}, 0x17) (async) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="eebf8c992e54"}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) r3 = socket(0x3, 0x80000, 0x80000000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) 03:49:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000008c0)={{&(0x7f0000000840)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"b1a452ecf718c239fa19a52309f5d716a92ee2579098698c8eec7f1d88029d55dce9762bbfc13e452507ef0bc18d87f229c9449988b53506a9dcaff733cd186e"}, {&(0x7f00000009c0)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x33989f07}, {&(0x7f0000000b40)=@adf_str={@normal='NumberCyInstances\x00', {"a8a57f44c162304a68bbd95b7d30626be998c6c4602a3d761ec5cdad1ef48a5ef12477147b412f45107cc0e2c6bc9c1977ea6c34087cbcde54b9bcac5b657b24"}, {&(0x7f0000000a80)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}}}}}}}}}, {&(0x7f00000007c0)={'Accelerator\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"dd8100c1297daee1e39de270fda17f685770d891aea67ea6000ced90570204c6106f508d072b662bbc96f48b2fd8dbbdb55f2f9763b90db463160ed0f51dcbb5"}, {&(0x7f0000000640)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000000000009}}}}}}}}}, 0x4}) getgroups(0x4, &(0x7f0000000000)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000040)=[r5, 0x0, 0xee01]) [ 1226.897967] QAT: failed to copy from user cfg_data. 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="eebf8c992e54"}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) r3 = socket(0x3, 0x80000, 0x80000000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) 03:49:33 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000200)={{&(0x7f0000000180)={'Accelerator1\x00', {&(0x7f00000000c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"8edc3580bb5ca07f608e73d88b89328cb601e0c4758f2a1d413aa349dc9640ae50fdb11931b84b1ba2bffe1272d4c5a33b59c187c7c7e5b781d5c4c8d22ec41f"}, {&(0x7f0000000000)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingEnabled\x00'}, {"7d63b6bd809bdc736ca32457dfebe56cbfd17c2a9ea7188d5cb70d0a854ab3f470126dc0c430d4efa51229e9f5f6180c26a5fdfeb69f8c2c6675b8f7fd592c21"}}}}}}}}) 03:49:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000008c0)={{&(0x7f0000000840)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"b1a452ecf718c239fa19a52309f5d716a92ee2579098698c8eec7f1d88029d55dce9762bbfc13e452507ef0bc18d87f229c9449988b53506a9dcaff733cd186e"}, {&(0x7f00000009c0)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x33989f07}, {&(0x7f0000000b40)=@adf_str={@normal='NumberCyInstances\x00', {"a8a57f44c162304a68bbd95b7d30626be998c6c4602a3d761ec5cdad1ef48a5ef12477147b412f45107cc0e2c6bc9c1977ea6c34087cbcde54b9bcac5b657b24"}, {&(0x7f0000000a80)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}}}}}}}}}, {&(0x7f00000007c0)={'Accelerator\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"dd8100c1297daee1e39de270fda17f685770d891aea67ea6000ced90570204c6106f508d072b662bbc96f48b2fd8dbbdb55f2f9763b90db463160ed0f51dcbb5"}, {&(0x7f0000000640)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000000000009}}}}}}}}}, 0x4}) getgroups(0x4, &(0x7f0000000000)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000040)=[r5, 0x0, 0xee01]) 03:49:33 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7ffc}, 0x3) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x8, 0x1, 0x7fffffff, 0x8, 0x7f, 0x20, 0x2, 0x7, 0x7, 0xc1, 0x80, "3a10fe291ccac8498b2815219164a80df14f2078737fe8ec664d3238f3f1f404"}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x8, 0x1, 0x7fffffff, 0x8, 0x7f, 0x20, 0x2, 0x7, 0x7, 0xc1, 0x80, "3a10fe291ccac8498b2815219164a80df14f2078737fe8ec664d3238f3f1f404"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x9}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x9}}, 0x18) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1226.933074] QAT: failed to copy from user cfg_data. [ 1226.947141] QAT: failed to copy from user cfg_data. [ 1226.956228] QAT: Device 0 not found [ 1226.963877] QAT: failed to copy from user cfg_data. 03:49:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="eebf8c992e54"}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) r3 = socket(0x3, 0x80000, 0x80000000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) 03:49:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:33 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7ffc}, 0x3) (async) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000008c0)={{&(0x7f0000000840)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"b1a452ecf718c239fa19a52309f5d716a92ee2579098698c8eec7f1d88029d55dce9762bbfc13e452507ef0bc18d87f229c9449988b53506a9dcaff733cd186e"}, {&(0x7f00000009c0)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x33989f07}, {&(0x7f0000000b40)=@adf_str={@normal='NumberCyInstances\x00', {"a8a57f44c162304a68bbd95b7d30626be998c6c4602a3d761ec5cdad1ef48a5ef12477147b412f45107cc0e2c6bc9c1977ea6c34087cbcde54b9bcac5b657b24"}, {&(0x7f0000000a80)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}}}}}}}}}, {&(0x7f00000007c0)={'Accelerator\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"dd8100c1297daee1e39de270fda17f685770d891aea67ea6000ced90570204c6106f508d072b662bbc96f48b2fd8dbbdb55f2f9763b90db463160ed0f51dcbb5"}, {&(0x7f0000000640)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000000000009}}}}}}}}}, 0x4}) getgroups(0x4, &(0x7f0000000000)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) 03:49:33 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x250481) [ 1227.014781] QAT: failed to copy from user cfg_data. [ 1227.020910] QAT: failed to copy from user cfg_data. [ 1227.034594] QAT: Device 0 not found 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'Accelerator\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {}, {&(0x7f0000000000)=@adf_hex={@format={'Cy', '1', 'RingAsymRx\x00'}, {0xd9}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0xffffffff}}}}}}}, 0x80}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x14, 0x0, [0xc3, 0x4, 0x534839e7, 0xffff, 0x81, 0xfff, 0x101, 0x8, 0x80000000, 0x7f, 0x80000001, 0x3, 0xfffffffd, 0xe6b6, 0xcc3, 0x9]}, {0x4, 0x0, [0x4, 0x6, 0x2, 0x0, 0x5, 0x9, 0x3, 0xfff, 0x42, 0x7, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x2]}, {0x8, 0x0, [0x0, 0x2f101874, 0x9, 0x3ff, 0x10000, 0x3c, 0xffff, 0x7f, 0x3, 0xffff, 0xffff, 0x6, 0x401, 0x43, 0xeac, 0x80000000]}, {0x20, 0x0, [0x8, 0x0, 0x5, 0x200, 0x67d1, 0xffffffab, 0x7, 0xa22, 0x2, 0x5, 0x8, 0x9, 0x3ff, 0xffffffff, 0x7, 0x1]}, {0x26, 0x0, [0x8, 0x7fffffff, 0x7, 0x7, 0xffffffff, 0x6, 0x2, 0x14, 0x1, 0x800, 0x7, 0x5, 0x9, 0x8, 0x9, 0x10001]}, {0x24, 0x0, [0x4, 0x4, 0x1ff, 0x4, 0x1000, 0xc1c, 0x1, 0x9, 0x0, 0x4, 0x1, 0x989, 0x4, 0xfead, 0x5, 0x8]}, {0x0, 0x0, [0x5, 0x7f, 0x6, 0x4, 0x3e, 0x8, 0x0, 0x6, 0x375, 0x6cb, 0x3, 0xf4, 0x0, 0xfffffff7, 0x7f, 0x400]}, {0x8, 0x0, [0x1ff, 0xfffffff7, 0x2881, 0xea, 0x0, 0x9, 0x74bc3215, 0x5, 0x8, 0x332d52bb, 0x1, 0x7fffffff, 0x3, 0xffffff95, 0x9, 0xffffffc0]}, {0xa, 0x0, [0x7, 0x100, 0x8, 0x7, 0xfff, 0x0, 0xffff, 0x6, 0x200, 0x7f, 0x7fffffff, 0x1, 0xffffffff, 0x6, 0x0, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) [ 1227.067457] QAT: failed to copy from user cfg_data. 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="eebf8c992e54"}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) socket(0x3, 0x80000, 0x80000000) 03:49:34 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7ffc}, 0x3) (async, rerun: 32) r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (rerun: 32) read$char_usb(r0, 0x0, 0x0) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x250481) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x250481) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000008c0)={{&(0x7f0000000840)={'Accelerator1\x00', {&(0x7f0000000580)=@adf_str={@format={'Dc', '0', 'NumConcurrentAsymRequests\x00'}, {"b1a452ecf718c239fa19a52309f5d716a92ee2579098698c8eec7f1d88029d55dce9762bbfc13e452507ef0bc18d87f229c9449988b53506a9dcaff733cd186e"}, {&(0x7f00000009c0)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x33989f07}, {&(0x7f0000000b40)=@adf_str={@normal='NumberCyInstances\x00', {"a8a57f44c162304a68bbd95b7d30626be998c6c4602a3d761ec5cdad1ef48a5ef12477147b412f45107cc0e2c6bc9c1977ea6c34087cbcde54b9bcac5b657b24"}, {&(0x7f0000000a80)=@adf_hex={@normal='NumberCyInstances\x00', {0x6}}}}}}}}}, {&(0x7f00000007c0)={'Accelerator\x00', {&(0x7f0000000700)=@adf_str={@normal='NumberDcInstances\x00', {"dd8100c1297daee1e39de270fda17f685770d891aea67ea6000ced90570204c6106f508d072b662bbc96f48b2fd8dbbdb55f2f9763b90db463160ed0f51dcbb5"}, {&(0x7f0000000640)=@adf_hex={@normal='NumberCyInstances\x00', {0x8000000000009}}}}}}}}}, 0x4}) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="eebf8c992e54"}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'Accelerator\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {}, {&(0x7f0000000000)=@adf_hex={@format={'Cy', '1', 'RingAsymRx\x00'}, {0xd9}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0xffffffff}}}}}}}, 0x80}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x14, 0x0, [0xc3, 0x4, 0x534839e7, 0xffff, 0x81, 0xfff, 0x101, 0x8, 0x80000000, 0x7f, 0x80000001, 0x3, 0xfffffffd, 0xe6b6, 0xcc3, 0x9]}, {0x4, 0x0, [0x4, 0x6, 0x2, 0x0, 0x5, 0x9, 0x3, 0xfff, 0x42, 0x7, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x2]}, {0x8, 0x0, [0x0, 0x2f101874, 0x9, 0x3ff, 0x10000, 0x3c, 0xffff, 0x7f, 0x3, 0xffff, 0xffff, 0x6, 0x401, 0x43, 0xeac, 0x80000000]}, {0x20, 0x0, [0x8, 0x0, 0x5, 0x200, 0x67d1, 0xffffffab, 0x7, 0xa22, 0x2, 0x5, 0x8, 0x9, 0x3ff, 0xffffffff, 0x7, 0x1]}, {0x26, 0x0, [0x8, 0x7fffffff, 0x7, 0x7, 0xffffffff, 0x6, 0x2, 0x14, 0x1, 0x800, 0x7, 0x5, 0x9, 0x8, 0x9, 0x10001]}, {0x24, 0x0, [0x4, 0x4, 0x1ff, 0x4, 0x1000, 0xc1c, 0x1, 0x9, 0x0, 0x4, 0x1, 0x989, 0x4, 0xfead, 0x5, 0x8]}, {0x0, 0x0, [0x5, 0x7f, 0x6, 0x4, 0x3e, 0x8, 0x0, 0x6, 0x375, 0x6cb, 0x3, 0xf4, 0x0, 0xfffffff7, 0x7f, 0x400]}, {0x8, 0x0, [0x1ff, 0xfffffff7, 0x2881, 0xea, 0x0, 0x9, 0x74bc3215, 0x5, 0x8, 0x332d52bb, 0x1, 0x7fffffff, 0x3, 0xffffff95, 0x9, 0xffffffc0]}, {0xa, 0x0, [0x7, 0x100, 0x8, 0x7, 0xfff, 0x0, 0xffff, 0x6, 0x200, 0x7f, 0x7fffffff, 0x1, 0xffffffff, 0x6, 0x0, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) [ 1227.118752] QAT: failed to copy from user cfg_data. [ 1227.138109] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket(0x10, 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x828, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000804) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x250481) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x0, 0x6140) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) pipe2$watch_queue(&(0x7f00000004c0), 0x80) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'Accelerator\x00', {&(0x7f00000000c0)=@adf_hex={@normal='NumberDcInstances\x00', {}, {&(0x7f0000000000)=@adf_hex={@format={'Cy', '1', 'RingAsymRx\x00'}, {0xd9}}}}}, {&(0x7f0000000240)={'Accelerator1\x00', {&(0x7f0000000180)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0xffffffff}}}}}}}, 0x80}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x14, 0x0, [0xc3, 0x4, 0x534839e7, 0xffff, 0x81, 0xfff, 0x101, 0x8, 0x80000000, 0x7f, 0x80000001, 0x3, 0xfffffffd, 0xe6b6, 0xcc3, 0x9]}, {0x4, 0x0, [0x4, 0x6, 0x2, 0x0, 0x5, 0x9, 0x3, 0xfff, 0x42, 0x7, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x2]}, {0x8, 0x0, [0x0, 0x2f101874, 0x9, 0x3ff, 0x10000, 0x3c, 0xffff, 0x7f, 0x3, 0xffff, 0xffff, 0x6, 0x401, 0x43, 0xeac, 0x80000000]}, {0x20, 0x0, [0x8, 0x0, 0x5, 0x200, 0x67d1, 0xffffffab, 0x7, 0xa22, 0x2, 0x5, 0x8, 0x9, 0x3ff, 0xffffffff, 0x7, 0x1]}, {0x26, 0x0, [0x8, 0x7fffffff, 0x7, 0x7, 0xffffffff, 0x6, 0x2, 0x14, 0x1, 0x800, 0x7, 0x5, 0x9, 0x8, 0x9, 0x10001]}, {0x24, 0x0, [0x4, 0x4, 0x1ff, 0x4, 0x1000, 0xc1c, 0x1, 0x9, 0x0, 0x4, 0x1, 0x989, 0x4, 0xfead, 0x5, 0x8]}, {0x0, 0x0, [0x5, 0x7f, 0x6, 0x4, 0x3e, 0x8, 0x0, 0x6, 0x375, 0x6cb, 0x3, 0xf4, 0x0, 0xfffffff7, 0x7f, 0x400]}, {0x8, 0x0, [0x1ff, 0xfffffff7, 0x2881, 0xea, 0x0, 0x9, 0x74bc3215, 0x5, 0x8, 0x332d52bb, 0x1, 0x7fffffff, 0x3, 0xffffff95, 0x9, 0xffffffc0]}, {0xa, 0x0, [0x7, 0x100, 0x8, 0x7, 0xfff, 0x0, 0xffff, 0x6, 0x200, 0x7f, 0x7fffffff, 0x1, 0xffffffff, 0x6, 0x0, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 03:49:34 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x250481) [ 1227.208790] QAT: failed to copy from user cfg_data. [ 1227.218233] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket(0x10, 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x828, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000804) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x828, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000804) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800", @ANYRES16=0x0], 0x1398}}, 0x2) [ 1227.270353] QAT: failed to copy from user cfg_data. 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x14, 0x0, [0x0, 0x59, 0x8, 0x9, 0x200, 0x0, 0x6, 0x3, 0xfe000, 0x3, 0x6, 0x100, 0x7f, 0x200, 0x1000000]}, {0x1a, 0x0, [0x8, 0x20, 0x0, 0xffffff96, 0xffffc3bf, 0x6, 0x1bfba703, 0xc8a, 0x5, 0x1, 0x7fff, 0x8, 0x400, 0xff, 0x7ff]}, {0x16f263d131fac606, 0x0, [0x401, 0x6, 0x0, 0x1ff, 0x3ff, 0x6, 0xffff0001, 0x1f, 0x0, 0x7f, 0x5, 0xed3d9b60, 0x3, 0x8000, 0x1, 0x1]}, {0x20, 0x0, [0x7f, 0x1574, 0x100, 0x1000, 0x53, 0x7, 0x9, 0x7fff, 0x4, 0x7fffffff, 0x7f6c, 0x6, 0xfffffffa, 0x3, 0x5]}, {0x2, 0x0, [0x800, 0x3, 0x4, 0xfffffffd, 0xad, 0x5, 0x9, 0x6, 0x521, 0x3ff, 0x7fff, 0x100, 0x7, 0x5, 0x3f, 0x3]}, {0x23, 0x0, [0x3, 0x5, 0x400, 0x3, 0x80, 0x3, 0x400, 0x400, 0x9, 0x4, 0x2, 0x7, 0x9, 0x7f, 0x1ff, 0x80]}, {0x0, 0x0, [0x3c, 0xc00, 0xaf, 0x400, 0x2, 0xffffffff, 0x200, 0x80, 0xa0000000, 0x3, 0x0, 0x7, 0x6, 0x8, 0x7, 0x70a]}, {0x6, 0x0, [0x4, 0x0, 0x20, 0x40, 0x0, 0x1, 0x8, 0x8, 0x40, 0x101, 0x800, 0x1, 0x80000000, 0x6, 0xec, 0x90]}, {0x2d, 0x0, [0x1, 0x7f, 0x3f, 0x1000, 0xe5, 0x4, 0xfff, 0xd2c, 0x7, 0x73a7, 0x0, 0x8, 0x2, 0x9, 0x175d6847, 0x7fffffff]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) 03:49:34 executing program 5: syz_open_dev$video(0x0, 0xffbffffffffffff9, 0x250481) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="98138800"], 0x1398}}, 0x2) [ 1227.328123] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) read$char_usb(r0, 0x0, 0x0) socket(0x10, 0x1, 0x8000) (async) r1 = socket(0x10, 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x828, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000804) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x2, 0x3ff, 0x4, 0x2, 0x7, 0x8, 0x1, 0x3f, 0x9, 0x3f, 0x9, "bc356163c98d642024e3718cf806ae7aa8fde753b3ff30a7ac62e933502c1f74"}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) [ 1227.348674] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: read$char_usb(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1398}}, 0x2) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x250481) 03:49:34 executing program 1: read$char_usb(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57) (async) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x250481) 03:49:34 executing program 1: read$char_usb(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/87, 0x57) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x250481) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$char_usb(r0, 0x0, 0x0) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x2, 0x3ff, 0x4, 0x2, 0x7, 0x8, 0x1, 0x3f, 0x9, 0x3f, 0x9, "bc356163c98d642024e3718cf806ae7aa8fde753b3ff30a7ac62e933502c1f74"}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x2, 0x3ff, 0x4, 0x2, 0x7, 0x8, 0x1, 0x3f, 0x9, 0x3f, 0x9, "bc356163c98d642024e3718cf806ae7aa8fde753b3ff30a7ac62e933502c1f74"}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000540)={{}, 0x4}) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100)) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1398}}, 0x0) [ 1227.437952] QAT: failed to copy from user cfg_data. [ 1227.448550] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$char_usb(r0, 0x0, 0x0) (async) read$char_usb(r0, 0x0, 0x0) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x0) [ 1227.513033] QAT: failed to copy from user cfg_data. 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1227.534078] QAT: failed to copy from user cfg_data. 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1398}}, 0x0) [ 1227.555549] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) read$char_usb(r0, 0x0, 0x0) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x0) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x2, 0x3ff, 0x4, 0x2, 0x7, 0x8, 0x1, 0x3f, 0x9, 0x3f, 0x9, "bc356163c98d642024e3718cf806ae7aa8fde753b3ff30a7ac62e933502c1f74"}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1227.578868] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x2, 0x0}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x802}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) r3 = syz_open_dev$video(&(0x7f0000000800), 0xffffffffffff6596, 0x4e0000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x20}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x212c00, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xfffff801, 0x8, "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", 0x5, 0x9, 0x6, 0xb0, 0x80, 0x4, 0x9c, 0x1}}}, 0x120) read$char_usb(r3, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r0}, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:49:34 executing program 5: syz_open_dev$video(&(0x7f0000000000), 0xffbffffffffffff9, 0x0) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x2000000000000}, {&(0x7f0000000040)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@normal='NumberCyInstances\x00', {0x7}, {&(0x7f00000001c0)=@adf_str={@format={'Dc', '5', 'RingRx\x00'}, {"11b643e0af9172117f241de404887e264d541ba654ed450e1a75199d522909993349e52caebe7ff968ee1a5d22a0d6a4f6e09013cdc0e1ded630bcc92de7d3db"}}}}}}}}}, 0xae}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) r1 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1227.628969] QAT: failed to copy from user cfg_data. [ 1227.638316] QAT: failed to copy from user cfg_data. 03:49:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x2, 0x0}, 0x8) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x802}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) (async) r3 = syz_open_dev$video(&(0x7f0000000800), 0xffffffffffff6596, 0x4e0000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x20}) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x212c00, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xfffff801, 0x8, "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", 0x5, 0x9, 0x6, 0xb0, 0x80, 0x4, 0x9c, 0x1}}}, 0x120) (async) read$char_usb(r3, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r0}, 0x4) (async) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x2000000000000}, {&(0x7f0000000040)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@normal='NumberCyInstances\x00', {0x7}, {&(0x7f00000001c0)=@adf_str={@format={'Dc', '5', 'RingRx\x00'}, {"11b643e0af9172117f241de404887e264d541ba654ed450e1a75199d522909993349e52caebe7ff968ee1a5d22a0d6a4f6e09013cdc0e1ded630bcc92de7d3db"}}}}}}}}}, 0xae}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 3: syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) [ 1227.681736] QAT: Device 174 not found [ 1227.700163] QAT: failed to copy from user cfg_data. [ 1227.712280] QAT: failed to copy from user cfg_data. 03:49:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x2000000000000}, {&(0x7f0000000040)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@normal='NumberCyInstances\x00', {0x7}, {&(0x7f00000001c0)=@adf_str={@format={'Dc', '5', 'RingRx\x00'}, {"11b643e0af9172117f241de404887e264d541ba654ed450e1a75199d522909993349e52caebe7ff968ee1a5d22a0d6a4f6e09013cdc0e1ded630bcc92de7d3db"}}}}}}}}}, 0xae}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_hex={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x2000000000000}, {&(0x7f0000000040)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x6}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@normal='NumberCyInstances\x00', {0x7}, {&(0x7f00000001c0)=@adf_str={@format={'Dc', '5', 'RingRx\x00'}, {"11b643e0af9172117f241de404887e264d541ba654ed450e1a75199d522909993349e52caebe7ff968ee1a5d22a0d6a4f6e09013cdc0e1ded630bcc92de7d3db"}}}}}}}}}, 0xae}) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) [ 1227.746406] QAT: Device 174 not found 03:49:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0x1, 0x81, 0x5, 0x7, 0x93, "85ac480c205862cb6e870ec930e2d03158d212f491e5576302060364ef3277be"}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:34 executing program 3: r0 = syz_open_dev$video(0x0, 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) [ 1227.778164] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x2}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x2, 0x0}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x802}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) r3 = syz_open_dev$video(&(0x7f0000000800), 0xffffffffffff6596, 0x4e0000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x20}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x20}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x212c00, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xfffff801, 0x8, "889e7d98d88a54e87430c4832a8afd0dec109760b7335b880178428ffbe8941e0905dfaef373919fcf75cc7b138b0e43b988c7cbbddbee60c557b72f96e51c62db19be55ab58aafd503b5cf514ae7eb0c576198b2314beb98b65d77a939b1d96527ea4df8c6ed5a1c109505691aa2fa287d0c295419fb397fe32310d629a61ec5446ba6d6936a4826bba880fbcf6fb17698cb43ec2d0e1c0f63ca55432be34bcf9b3895dad0acd849e1af0d9b9fdcfeab91420e9531c1ab57308cc4496afecc650d763e41fc58bd975f421924b4cb5c1f2733371f7dd29579d9059c07509cf39317d0ed83147192754d2275f6001467fa2a64b56e71292f0036b662fc2d03bb1", 0x5, 0x9, 0x6, 0xb0, 0x80, 0x4, 0x9c, 0x1}}}, 0x120) read$char_usb(r3, 0x0, 0x0) (async) read$char_usb(r3, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r0}, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:49:34 executing program 5: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1227.816022] QAT: failed to copy from user cfg_data. [ 1227.830641] QAT: Device 174 not found [ 1227.834928] QAT: failed to copy from user cfg_data. 03:49:34 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 2: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:34 executing program 5: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000900)={0x5, 0x6, 0x4, 0x80, 0x6, 0x20, 0xf7, 0x5b, 0x7, 0x6, 0x45, "595c6be664f2b4d6e985e3b7d56b510c9297703fbd03468c9fb9d18b14e0549e"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000008c0)={{&(0x7f0000000840)={'GENERAL\x00', {&(0x7f0000000580)=@adf_hex={@format={'Cy', '5', 'RingTx\x00'}, {0x100}, {&(0x7f00000004c0)=@adf_dec={@format={'Dc', '5', 'NumConcurrentAsymRequests\x00'}, {0x3}}}}}, {&(0x7f00000007c0)={'KERNEL\x00', {&(0x7f0000000700)=@adf_dec={@format={'Cy', '5', 'RingSymRx\x00'}, {0x1}, {&(0x7f0000000640)=@adf_str={@normal='NumberCyInstances\x00', {"75afecebb40e8907938db2e73bc94bf4e025b87a3971f26764d118cf01cd8d3819377289950e0fd5e8704bfd51147faccf15a1afd873ca2a6c35a529d11cf854"}}}}}}}}}, 0x9}) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_hex={@format={'Cy', '3', 'NumConcurrentSymRequests\x00'}, {0x8}, {&(0x7f0000000000)=@adf_dec={@format={'Cy', '0', 'NumConcurrentSymRequests\x00'}, {0x400000000000009}}}}}, {&(0x7f0000000300)={'GENERAL\x00', {&(0x7f0000000240)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {0x58a5}, {&(0x7f0000000180)=@adf_str={@bank={'Bank', '0', 'CoreAffinity\x00'}, {"009bbd1ad3b5c513507492f12c976d6661e8310118edfd1d4ff9dd2181ff14d4970202983743f9fc63aad4ae83360b5ca88bdb8ee54024a5e391ed49233fe08b"}}}}}}}}}, 0x8}) 03:49:34 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:34 executing program 3: r0 = syz_open_dev$video(0x0, 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 5: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) [ 1227.859514] QAT: failed to copy from user cfg_data. [ 1227.869903] QAT: Device 174 not found [ 1227.881518] QAT: failed to copy from user cfg_data. [ 1227.899621] QAT: failed to copy from user cfg_data. 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:34 executing program 2: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) [ 1227.958463] QAT: failed to copy from user cfg_data. 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:34 executing program 3: r0 = syz_open_dev$video(0x0, 0x2, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:34 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000000)) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) [ 1227.982873] QAT: failed to copy from user cfg_data. 03:49:34 executing program 2: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1228.018385] QAT: Device 8 not found 03:49:34 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000900)={0x5, 0x6, 0x4, 0x80, 0x6, 0x20, 0xf7, 0x5b, 0x7, 0x6, 0x45, "595c6be664f2b4d6e985e3b7d56b510c9297703fbd03468c9fb9d18b14e0549e"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000008c0)={{&(0x7f0000000840)={'GENERAL\x00', {&(0x7f0000000580)=@adf_hex={@format={'Cy', '5', 'RingTx\x00'}, {0x100}, {&(0x7f00000004c0)=@adf_dec={@format={'Dc', '5', 'NumConcurrentAsymRequests\x00'}, {0x3}}}}}, {&(0x7f00000007c0)={'KERNEL\x00', {&(0x7f0000000700)=@adf_dec={@format={'Cy', '5', 'RingSymRx\x00'}, {0x1}, {&(0x7f0000000640)=@adf_str={@normal='NumberCyInstances\x00', {"75afecebb40e8907938db2e73bc94bf4e025b87a3971f26764d118cf01cd8d3819377289950e0fd5e8704bfd51147faccf15a1afd873ca2a6c35a529d11cf854"}}}}}}}}}, 0x9}) (async, rerun: 64) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_hex={@format={'Cy', '3', 'NumConcurrentSymRequests\x00'}, {0x8}, {&(0x7f0000000000)=@adf_dec={@format={'Cy', '0', 'NumConcurrentSymRequests\x00'}, {0x400000000000009}}}}}, {&(0x7f0000000300)={'GENERAL\x00', {&(0x7f0000000240)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {0x58a5}, {&(0x7f0000000180)=@adf_str={@bank={'Bank', '0', 'CoreAffinity\x00'}, {"009bbd1ad3b5c513507492f12c976d6661e8310118edfd1d4ff9dd2181ff14d4970202983743f9fc63aad4ae83360b5ca88bdb8ee54024a5e391ed49233fe08b"}}}}}}}}}, 0x8}) (rerun: 64) 03:49:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x101001) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) [ 1228.039065] QAT: failed to copy from user cfg_data. 03:49:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) [ 1228.060684] QAT: failed to copy from user cfg_data. 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000000)) 03:49:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) [ 1228.082368] QAT: Device 8 not found [ 1228.100902] QAT: Device 8 not found [ 1228.115877] QAT: Device 8 not found [ 1228.126533] QAT: Device 8 not found 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:35 executing program 3: syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) [ 1228.130585] QAT: Device 8 not found [ 1228.135383] QAT: Device 8 not found [ 1228.139247] QAT: Device 8 not found [ 1228.171547] QAT: Device 8 not found [ 1228.179096] QAT: Device 8 not found [ 1228.183172] QAT: Device 8 not found [ 1228.193167] QAT: Device 8 not found [ 1228.197162] QAT: Device 8 not found [ 1228.208539] QAT: Device 8 not found [ 1228.212574] QAT: Device 8 not found [ 1228.216316] QAT: Device 8 not found [ 1228.223016] QAT: Device 8 not found [ 1228.226664] QAT: Device 8 not found [ 1228.230288] QAT: Device 8 not found [ 1228.234003] QAT: Device 8 not found [ 1228.237650] QAT: Device 8 not found [ 1228.241929] QAT: Device 8 not found [ 1228.245571] QAT: Device 8 not found [ 1228.249213] QAT: Device 8 not found [ 1228.252914] QAT: Device 8 not found [ 1228.256564] QAT: Device 8 not found [ 1228.260196] QAT: Device 8 not found [ 1228.264222] QAT: Device 8 not found [ 1228.267861] QAT: Device 8 not found [ 1228.271617] QAT: Device 8 not found [ 1228.275287] QAT: Device 8 not found [ 1228.278914] QAT: Device 8 not found [ 1228.282604] QAT: Device 8 not found [ 1228.286238] QAT: Device 8 not found [ 1228.289860] QAT: Device 8 not found [ 1228.293570] QAT: Device 8 not found [ 1228.297211] QAT: Device 8 not found [ 1228.300837] QAT: Device 8 not found [ 1228.304542] QAT: Device 8 not found [ 1228.308194] QAT: Device 8 not found [ 1228.311934] QAT: Device 8 not found [ 1228.315581] QAT: Device 8 not found [ 1228.319209] QAT: Device 8 not found [ 1228.322892] QAT: Device 8 not found [ 1228.326530] QAT: Device 8 not found [ 1228.330149] QAT: Device 8 not found [ 1228.333848] QAT: Device 8 not found [ 1228.337491] QAT: Device 8 not found [ 1228.341204] QAT: Device 8 not found [ 1228.344839] QAT: Device 8 not found [ 1228.348459] QAT: Device 8 not found [ 1228.352166] QAT: Device 8 not found [ 1228.355818] QAT: Device 8 not found [ 1228.359542] QAT: Device 8 not found [ 1228.363224] QAT: Device 8 not found [ 1228.366861] QAT: Device 8 not found [ 1228.370506] QAT: Device 8 not found [ 1228.374223] QAT: Device 8 not found [ 1228.377890] QAT: Device 8 not found 03:49:35 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async, rerun: 32) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (rerun: 32) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000900)={0x5, 0x6, 0x4, 0x80, 0x6, 0x20, 0xf7, 0x5b, 0x7, 0x6, 0x45, "595c6be664f2b4d6e985e3b7d56b510c9297703fbd03468c9fb9d18b14e0549e"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000008c0)={{&(0x7f0000000840)={'GENERAL\x00', {&(0x7f0000000580)=@adf_hex={@format={'Cy', '5', 'RingTx\x00'}, {0x100}, {&(0x7f00000004c0)=@adf_dec={@format={'Dc', '5', 'NumConcurrentAsymRequests\x00'}, {0x3}}}}}, {&(0x7f00000007c0)={'KERNEL\x00', {&(0x7f0000000700)=@adf_dec={@format={'Cy', '5', 'RingSymRx\x00'}, {0x1}, {&(0x7f0000000640)=@adf_str={@normal='NumberCyInstances\x00', {"75afecebb40e8907938db2e73bc94bf4e025b87a3971f26764d118cf01cd8d3819377289950e0fd5e8704bfd51147faccf15a1afd873ca2a6c35a529d11cf854"}}}}}}}}}, 0x9}) (async, rerun: 64) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000400)={{&(0x7f0000000380)={'GENERAL\x00', {&(0x7f00000000c0)=@adf_hex={@format={'Cy', '3', 'NumConcurrentSymRequests\x00'}, {0x8}, {&(0x7f0000000000)=@adf_dec={@format={'Cy', '0', 'NumConcurrentSymRequests\x00'}, {0x400000000000009}}}}}, {&(0x7f0000000300)={'GENERAL\x00', {&(0x7f0000000240)=@adf_dec={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {0x58a5}, {&(0x7f0000000180)=@adf_str={@bank={'Bank', '0', 'CoreAffinity\x00'}, {"009bbd1ad3b5c513507492f12c976d6661e8310118edfd1d4ff9dd2181ff14d4970202983743f9fc63aad4ae83360b5ca88bdb8ee54024a5e391ed49233fe08b"}}}}}}}}}, 0x8}) (rerun: 64) 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:35 executing program 3: syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:35 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) [ 1228.381609] QAT: Device 8 not found [ 1228.385244] QAT: Device 8 not found [ 1228.388867] QAT: Device 8 not found [ 1228.392590] QAT: Device 8 not found [ 1228.396243] QAT: Device 8 not found [ 1228.399876] QAT: Device 8 not found [ 1228.403567] QAT: Device 8 not found 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 3: syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x10001, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) [ 1228.440611] QAT: failed to copy from user cfg_data. 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000140)={{&(0x7f00000000c0)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"5a1ca9a3bffe72906b8804eb9ef66e8c557bef1fbc578c7bd3d6f7d1ec8ab5680ec52a672ec14236c2b0095cd1a31975b1ead855cf1eb7ffa4bd493615353b3d"}, {&(0x7f00000002c0)=@adf_str={@normal='NumberDcInstances\x00', {"49a7d45f3fafc7af1b34caca2bbb39fc9ab5e4bfe3ad784db348e6e7d2794ae36050639005005d0cbf8f4a338229024e334f22ecbc7cd9c83308e7586656a563"}, {&(0x7f0000000380)=@adf_dec={@format={'Dc', '1', 'BankNumber\x00'}, {0x783ab048}}}}}}}}}, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000440)={{&(0x7f0000000640)={'KERNEL\x00', {}, {&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x8000000000000000}, {&(0x7f00000004c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {0x7}}}}}}}}}, 0xd0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x1, @auto="9283834b1683651f"}) socket$inet6_sctp(0xa, 0x5, 0x84) msgget$private(0x0, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:35 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000540)={{}, 0x4}) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1228.543117] QAT: failed to copy from user cfg_data. 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, 0x0, 0x2) 03:49:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000140)={{&(0x7f00000000c0)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"5a1ca9a3bffe72906b8804eb9ef66e8c557bef1fbc578c7bd3d6f7d1ec8ab5680ec52a672ec14236c2b0095cd1a31975b1ead855cf1eb7ffa4bd493615353b3d"}, {&(0x7f00000002c0)=@adf_str={@normal='NumberDcInstances\x00', {"49a7d45f3fafc7af1b34caca2bbb39fc9ab5e4bfe3ad784db348e6e7d2794ae36050639005005d0cbf8f4a338229024e334f22ecbc7cd9c83308e7586656a563"}, {&(0x7f0000000380)=@adf_dec={@format={'Dc', '1', 'BankNumber\x00'}, {0x783ab048}}}}}}}}}, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000440)={{&(0x7f0000000640)={'KERNEL\x00', {}, {&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x8000000000000000}, {&(0x7f00000004c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {0x7}}}}}}}}}, 0xd0}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x1, @auto="9283834b1683651f"}) socket$inet6_sctp(0xa, 0x5, 0x84) msgget$private(0x0, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) [ 1228.629898] QAT: failed to copy from user cfg_data. [ 1228.647686] QAT: failed to copy from user cfg_data. 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000140)={{&(0x7f00000000c0)={'GENERAL\x00', {&(0x7f0000000000)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"5a1ca9a3bffe72906b8804eb9ef66e8c557bef1fbc578c7bd3d6f7d1ec8ab5680ec52a672ec14236c2b0095cd1a31975b1ead855cf1eb7ffa4bd493615353b3d"}, {&(0x7f00000002c0)=@adf_str={@normal='NumberDcInstances\x00', {"49a7d45f3fafc7af1b34caca2bbb39fc9ab5e4bfe3ad784db348e6e7d2794ae36050639005005d0cbf8f4a338229024e334f22ecbc7cd9c83308e7586656a563"}, {&(0x7f0000000380)=@adf_dec={@format={'Dc', '1', 'BankNumber\x00'}, {0x783ab048}}}}}}}}}, 0x8}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000440)={{&(0x7f0000000640)={'KERNEL\x00', {}, {&(0x7f0000000240)={'Accelerator\x00', {&(0x7f0000000580)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x8000000000000000}, {&(0x7f00000004c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {0x7}}}}}}}}}, 0xd0}) (async, rerun: 32) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x1, @auto="9283834b1683651f"}) (rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) msgget$private(0x0, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 03:49:35 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x0) 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1228.706768] QAT: failed to copy from user cfg_data. 03:49:35 executing program 1: r0 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 4: gettid() r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x3, 0xfffffc01, 0x10e, 0x7, 0x0, 0x1c, 0x5, 0x6, 0x2, 0x7, 0x80, "1b61c5b57b22d35accbfb248ac1644c75d43e468b063f434d0be239de0c9845a"}) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1228.755800] QAT: failed to copy from user cfg_data. 03:49:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x0) 03:49:35 executing program 1: r0 = socket(0x0, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1228.786059] QAT: failed to copy from user cfg_data. 03:49:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000540)) 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x8, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 4: gettid() r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x3, 0xfffffc01, 0x10e, 0x7, 0x0, 0x1c, 0x5, 0x6, 0x2, 0x7, 0x80, "1b61c5b57b22d35accbfb248ac1644c75d43e468b063f434d0be239de0c9845a"}) 03:49:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1398}}, 0x2) 03:49:35 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:35 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x4, 0x0, {r0, r1/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x80, "92b8d955"}, 0x40}) [ 1228.815481] QAT: failed to copy from user cfg_data. [ 1228.829825] QAT: failed to copy from user cfg_data. 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x20b0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 1: r0 = socket(0x0, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1228.877543] QAT: failed to copy from user cfg_data. 03:49:35 executing program 4: gettid() r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000000)={0x3, 0xfffffc01, 0x10e, 0x7, 0x0, 0x1c, 0x5, 0x6, 0x2, 0x7, 0x80, "1b61c5b57b22d35accbfb248ac1644c75d43e468b063f434d0be239de0c9845a"}) 03:49:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x27) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x2}}, 0x18) 03:49:35 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x299, 0x2, 0x4, 0x100000, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "33deadc3"}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) close$fd_v4l2_buffer(r1) 03:49:35 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1228.909700] QAT: failed to copy from user cfg_data. 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x1, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 1: r0 = socket(0x0, 0x2, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000000)={{}, 0x39}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) 03:49:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000240)={0x4e03, 0x2, 0x4, 0x1, 0x8001, {r3, r4/1000+10000}, {0x0, 0x2, 0x3f, 0x71, 0x40, 0x4, "c2685833"}, 0x0, 0x4, {}, 0x800, 0x0, r1}) [ 1228.963289] QAT: failed to copy from user cfg_data. [ 1228.978703] QAT: failed to copy from user cfg_data. [ 1228.990465] QAT: failed to copy from user cfg_data. [ 1228.996052] QAT: failed to copy from user cfg_data. 03:49:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:35 executing program 1: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:35 executing program 5: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) [ 1229.009298] QAT: failed to copy from user cfg_data. [ 1229.022370] QAT: failed to copy from user cfg_data. [ 1229.030013] QAT: failed to copy from user cfg_data. [ 1229.048637] QAT: failed to copy from user cfg_data. [ 1229.057568] QAT: failed to copy from user cfg_data. 03:49:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "92b8d955"}, 0x0, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000240)={0x4e03, 0x2, 0x4, 0x1, 0x8001, {r3, r4/1000+10000}, {0x0, 0x2, 0x3f, 0x71, 0x40, 0x4, "c2685833"}, 0x0, 0x4, {}, 0x800, 0x0, r1}) [ 1229.066958] QAT: failed to copy from user cfg_data. [ 1229.085242] QAT: failed to copy from user cfg_data. [ 1229.096135] QAT: failed to copy from user cfg_data. [ 1229.101327] QAT: failed to copy from user cfg_data. [ 1229.107537] QAT: failed to copy from user cfg_data. [ 1229.114534] QAT: failed to copy from user cfg_data. [ 1229.119592] QAT: failed to copy from user cfg_data. [ 1229.127271] QAT: failed to copy from user cfg_data. [ 1229.133170] QAT: failed to copy from user cfg_data. [ 1229.138255] QAT: failed to copy from user cfg_data. [ 1229.144179] QAT: failed to copy from user cfg_data. [ 1229.149213] QAT: failed to copy from user cfg_data. [ 1229.155108] QAT: failed to copy from user cfg_data. [ 1229.160177] QAT: failed to copy from user cfg_data. [ 1229.166011] QAT: failed to copy from user cfg_data. [ 1229.172433] QAT: failed to copy from user cfg_data. [ 1229.177576] QAT: failed to copy from user cfg_data. [ 1229.183545] QAT: failed to copy from user cfg_data. [ 1229.188577] QAT: failed to copy from user cfg_data. [ 1229.194609] QAT: failed to copy from user cfg_data. [ 1229.199734] QAT: failed to copy from user cfg_data. [ 1229.205915] QAT: failed to copy from user cfg_data. [ 1229.210943] QAT: failed to copy from user cfg_data. [ 1229.216090] QAT: failed to copy from user cfg_data. [ 1229.221235] QAT: failed to copy from user cfg_data. [ 1229.226269] QAT: failed to copy from user cfg_data. [ 1229.232052] QAT: failed to copy from user cfg_data. [ 1229.237093] QAT: failed to copy from user cfg_data. [ 1229.242190] QAT: failed to copy from user cfg_data. [ 1229.247233] QAT: failed to copy from user cfg_data. [ 1229.252357] QAT: failed to copy from user cfg_data. [ 1229.257399] QAT: failed to copy from user cfg_data. [ 1229.263104] QAT: failed to copy from user cfg_data. [ 1229.268142] QAT: failed to copy from user cfg_data. [ 1229.273267] QAT: failed to copy from user cfg_data. [ 1229.278335] QAT: failed to copy from user cfg_data. [ 1229.283440] QAT: failed to copy from user cfg_data. [ 1229.288472] QAT: failed to copy from user cfg_data. [ 1229.293553] QAT: failed to copy from user cfg_data. [ 1229.298605] QAT: failed to copy from user cfg_data. [ 1229.303719] QAT: failed to copy from user cfg_data. [ 1229.308781] QAT: failed to copy from user cfg_data. [ 1229.313860] QAT: failed to copy from user cfg_data. [ 1229.318898] QAT: failed to copy from user cfg_data. [ 1229.324003] QAT: failed to copy from user cfg_data. [ 1229.329051] QAT: failed to copy from user cfg_data. [ 1229.334397] QAT: failed to copy from user cfg_data. [ 1229.339425] QAT: failed to copy from user cfg_data. [ 1229.344523] QAT: failed to copy from user cfg_data. [ 1229.349568] QAT: failed to copy from user cfg_data. [ 1229.354668] QAT: failed to copy from user cfg_data. [ 1229.359714] QAT: failed to copy from user cfg_data. 03:49:36 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket(0x25, 0x5, 0x101) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "925500"}}) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x1, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:36 executing program 5: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 03:49:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 03:49:36 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1229.364819] QAT: failed to copy from user cfg_data. [ 1229.369872] QAT: failed to copy from user cfg_data. [ 1229.374964] QAT: failed to copy from user cfg_data. [ 1229.379993] QAT: failed to copy from user cfg_data. [ 1229.385122] QAT: failed to copy from user cfg_data. [ 1229.390164] QAT: failed to copy from user cfg_data. 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000240)={0x6, 0x66, 0x400, 0x1, 0x7f, 0x82, 0x81, 0x1e, 0x40, 0x1f, 0x6, "9145246dee875511c34bc0096aa0ba2d5baeb396cfccd443b17d87f40c0a88c5"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x7, 0x4, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xab}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket(0x25, 0x5, 0x101) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "925500"}}) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x20, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:36 executing program 5: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 03:49:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket(0x25, 0x5, 0x101) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "925500"}}) 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async, rerun: 32) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) (async, rerun: 32) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000240)={0x6, 0x66, 0x400, 0x1, 0x7f, 0x82, 0x81, 0x1e, 0x40, 0x1f, 0x6, "9145246dee875511c34bc0096aa0ba2d5baeb396cfccd443b17d87f40c0a88c5"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x7, 0x4, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xab}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:36 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:36 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:36 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket(0x25, 0x5, 0x101) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) [ 1229.492098] QAT: failed to copy from user cfg_data. 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x59, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 03:49:36 executing program 1: socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:36 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) (async) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000240)={0x6, 0x66, 0x400, 0x1, 0x7f, 0x82, 0x81, 0x1e, 0x40, 0x1f, 0x6, "9145246dee875511c34bc0096aa0ba2d5baeb396cfccd443b17d87f40c0a88c5"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x7, 0x4, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xab}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x7, 0x4, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x4a}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xab}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:36 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket(0x25, 0x5, 0x101) 03:49:36 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) socket(0x25, 0x5, 0x101) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "363b959e"}, 0x40, 0x4, {}, 0xff}) 03:49:36 executing program 1: socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1229.707623] QAT: failed to copy from user cfg_data. 03:49:36 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20088094) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000040)={{}, 0x31}) 03:49:36 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x101) [ 1229.790594] QAT: failed to copy from user cfg_data. 03:49:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 03:49:36 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 03:49:36 executing program 1: socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "363b959e"}, 0x0, 0x4, {}, 0xff}) 03:49:36 executing program 0: syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) socket(0x25, 0x5, 0x101) 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20088094) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000040)={{}, 0x31}) 03:49:36 executing program 1: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 03:49:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "363b959e"}}) 03:49:36 executing program 0: socket(0x25, 0x5, 0x101) 03:49:36 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 03:49:36 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20088094) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000040)={{}, 0x31}) [ 1229.965572] QAT: failed to copy from user cfg_data. 03:49:36 executing program 1: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000580), 0x2, 0x2) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000500)=0x9) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000740)) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000700)=0xc0500) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000480)={{&(0x7f0000000400)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_str={@format={'Cy', '4', 'RingSymRx\x00'}, {"cbf5095a694b1fc0a38ed79732dfe156bedf7ec3f4f59e1c59c7d16588e40ff466589cde0101caf2ff74d053f42e0a966a877c0db0d858fa6816378aa5f77f24"}, {&(0x7f0000000040)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}, {0x7fdf}, {&(0x7f00000005c0)=@adf_hex={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {0x8000}}}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f0000000340)=@adf_hex={@normal='NumberDcInstances\x00', {0x2}, {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0xc33}}}}}}}}}, 0x41}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680), 0x24000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)={0x8, 0x0, [{0x20, 0x401, 0x3ff, [0x400, 0xfffffffa, 0x6f, 0x10001, 0x1, 0x0, 0x9, 0x1f71]}, {0x7, 0x3, 0x0, [0x1f, 0x4c0d, 0x3, 0x40, 0x0, 0x1a8, 0x9, 0x2]}, {0x1, 0x0, 0x1000, [0x20, 0x5, 0x7f, 0x7, 0xffffffff, 0x4f9, 0x0, 0x7]}, {0xfffffff9, 0x0, 0x0, [0x0, 0x8, 0x5, 0xf47, 0xfffffff9, 0x8, 0x5]}, {0xfffffff7, 0xc46, 0x4a77b070, [0x1000, 0x6f9c, 0x4, 0x5, 0x6, 0xa4f33d7, 0x0, 0x1]}, {0x96d, 0x75c, 0xfffff801, [0x51, 0x3, 0x5, 0x3, 0x411, 0x1, 0x7, 0x5]}, {0x76, 0x9, 0x1, [0x81, 0x1, 0x7fff, 0x400, 0x80000000, 0xb3, 0x7, 0x4]}, {0x8001, 0x6, 0x7, [0x5, 0x20, 0xff, 0x1, 0xfffffffe, 0xfffffff9, 0x9, 0x7fff]}]}) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000540)) 03:49:37 executing program 0: socket(0x0, 0x5, 0x101) 03:49:37 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xffffffffffffffff}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x7f}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r5}}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r5, 0x0, 0x1, 0x4}}, 0x20) 03:49:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000300)={{}, 0x8b}) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 0: socket(0x0, 0x5, 0x101) [ 1230.260766] QAT: failed to copy from user cfg_data. 03:49:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 0: socket(0x0, 0x5, 0x101) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xffffffffffffffff}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x7f}) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r5}}, 0x38) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r5, 0x0, 0x1, 0x4}}, 0x20) 03:49:37 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xffffffffffffffff}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x7f}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r5}}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r5, 0x0, 0x1, 0x4}}, 0x20) 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 3: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 0: socket(0x25, 0x0, 0x101) 03:49:37 executing program 3: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1230.378753] QAT: failed to copy from user cfg_data. [ 1230.397667] QAT: failed to copy from user cfg_data. 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xffffffffffffffff}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x7f}) (async) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000280)={{&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f00000000c0)=@adf_dec={@normal='NumberDcInstances\x00', {0xffffffffffffffff}}}, {&(0x7f0000000180)={'Accelerator0\x00'}}}}, 0x7f}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000010c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r5}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r5}}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r5, 0x0, 0x1, 0x4}}, 0x20) 03:49:37 executing program 0: socket(0x25, 0x0, 0x101) 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 3: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 0: socket(0x25, 0x0, 0x101) 03:49:37 executing program 3: r0 = socket(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 0: socket(0x25, 0x5, 0x0) [ 1230.483330] QAT: failed to copy from user cfg_data. 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 0: socket(0x25, 0x5, 0x0) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x3, 0x2, 0xfaa, 0xff, 0xb2, 0x5, 0x8, 0x9, 0x94, 0x1, 0xc2, "66385f2489c1740bc42d73d0e6420965feaa351daa38adf8ad20845acbe0459b"}) r1 = request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-$$\x00', 0xfffffffffffffffb) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r2 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb7) r4 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000002c0)='\xde\xe1S\xd8', r2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x7d) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000000200)={{&(0x7f0000000540)={'Accelerator0\x00', {}, {&(0x7f00000004c0)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x2}, {&(0x7f0000000300)=@adf_dec={@normal='NumberDcInstances\x00', {0x6}}}}}}}}}, 0x3f}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = request_key(&(0x7f0000000740)='rxrpc_s\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)=')$+\x00', r4) request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r6) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000001c0)=0x2) 03:49:37 executing program 3: r0 = socket(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 3: r0 = socket(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 0: socket(0x25, 0x5, 0x0) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x3, 0x2, 0xfaa, 0xff, 0xb2, 0x5, 0x8, 0x9, 0x94, 0x1, 0xc2, "66385f2489c1740bc42d73d0e6420965feaa351daa38adf8ad20845acbe0459b"}) r1 = request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-$$\x00', 0xfffffffffffffffb) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r2 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb7) r4 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000002c0)='\xde\xe1S\xd8', r2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x7d) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000000200)={{&(0x7f0000000540)={'Accelerator0\x00', {}, {&(0x7f00000004c0)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x2}, {&(0x7f0000000300)=@adf_dec={@normal='NumberDcInstances\x00', {0x6}}}}}}}}}, 0x3f}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) r6 = request_key(&(0x7f0000000740)='rxrpc_s\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)=')$+\x00', r4) request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r6) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000001c0)=0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x3, 0x2, 0xfaa, 0xff, 0xb2, 0x5, 0x8, 0x9, 0x94, 0x1, 0xc2, "66385f2489c1740bc42d73d0e6420965feaa351daa38adf8ad20845acbe0459b"}) (async) request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-$$\x00', 0xfffffffffffffffb) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) (async) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb7) (async) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000002c0)='\xde\xe1S\xd8', r2) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x7d) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000000200)={{&(0x7f0000000540)={'Accelerator0\x00', {}, {&(0x7f00000004c0)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x2}, {&(0x7f0000000300)=@adf_dec={@normal='NumberDcInstances\x00', {0x6}}}}}}}}}, 0x3f}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async) request_key(&(0x7f0000000740)='rxrpc_s\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)=')$+\x00', r4) (async) request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r6) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000001c0)=0x2) (async) [ 1230.667008] QAT: failed to copy from user cfg_data. 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r3, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r4, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 1230.735242] QAT: failed to copy from user cfg_data. 03:49:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000000)={0x3, 0x2, 0xfaa, 0xff, 0xb2, 0x5, 0x8, 0x9, 0x94, 0x1, 0xc2, "66385f2489c1740bc42d73d0e6420965feaa351daa38adf8ad20845acbe0459b"}) r1 = request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-$$\x00', 0xfffffffffffffffb) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r2 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r1) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xb7) (async, rerun: 32) r4 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000002c0)='\xde\xe1S\xd8', r2) (async, rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x7d) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, &(0x7f0000000200)={{&(0x7f0000000540)={'Accelerator0\x00', {}, {&(0x7f00000004c0)={'Accelerator1\x00', {&(0x7f00000003c0)=@adf_hex={@normal='NumberCyInstances\x00', {0x2}, {&(0x7f0000000300)=@adf_dec={@normal='NumberDcInstances\x00', {0x6}}}}}}}}}, 0x3f}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) (async) r6 = request_key(&(0x7f0000000740)='rxrpc_s\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)=')$+\x00', r4) request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='\xb6\xff\xcf\xb8\x9e+\xdf\x03h\xc7sJf\x16\xa2\xb0\xfd\xfcg\xf7u\x95\xf8\xd6\x17\x91\xdd\x10\xd2\xfbd\x94tC\xd8Rh\t=\x88\xa6\xa7\xfc\xed6\xbb\xe7Q\x11\xcd\x96]\xe2b\xaf\ae', r6) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000001c0)=0x2) 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 3: socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 3: socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x125ec0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7e69d1843493b403}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x7c}}, 0x20000084) 03:49:37 executing program 3: socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 1230.830536] QAT: failed to copy from user cfg_data. 03:49:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x125ec0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7e69d1843493b403}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x7c}}, 0x20000084) 03:49:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 03:49:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x125ec0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7e69d1843493b403}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x7c}}, 0x20000084) 03:49:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140), 0x80) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000002140), 0x80) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002100)={0x20, 0x0, r3, {0x200, 0x0, 0xffff, 0x80000001}}, 0x20) 03:49:37 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:49:37 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) [ 1231.084462] ================================================================== [ 1231.092025] BUG: KASAN: use-after-free in __vb2_perform_fileio+0xce9/0xda0 [ 1231.099051] Read of size 4 at addr ffff88809915de5c by task syz-executor.2/12832 [ 1231.106579] [ 1231.108203] CPU: 0 PID: 12832 Comm: syz-executor.2 Not tainted 4.14.306-syzkaller #0 [ 1231.116071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1231.125430] Call Trace: [ 1231.128007] dump_stack+0x1b2/0x281 [ 1231.131737] print_address_description.cold+0x54/0x1d3 [ 1231.137014] kasan_report_error.cold+0x8a/0x191 [ 1231.141704] ? __vb2_perform_fileio+0xce9/0xda0 [ 1231.146370] __asan_report_load4_noabort+0x68/0x70 [ 1231.151291] ? __vb2_perform_fileio+0xce9/0xda0 [ 1231.155980] __vb2_perform_fileio+0xce9/0xda0 [ 1231.160481] ? __vb2_init_fileio+0xa90/0xa90 [ 1231.164890] ? aa_file_perm+0x304/0xab0 [ 1231.168860] vb2_fop_read+0x1ef/0x3d0 [ 1231.172663] ? vb2_fop_write+0x3d0/0x3d0 [ 1231.176711] v4l2_read+0x19a/0x200 [ 1231.180242] __vfs_read+0xe4/0x620 [ 1231.183766] ? v4l2_write+0x200/0x200 [ 1231.187653] ? vfs_copy_file_range+0x9b0/0x9b0 [ 1231.192238] ? common_file_perm+0x3ee/0x580 [ 1231.196556] ? lock_acquire+0x170/0x3f0 [ 1231.200533] ? security_file_permission+0x82/0x1e0 [ 1231.205447] ? rw_verify_area+0xe1/0x2a0 [ 1231.209513] vfs_read+0x139/0x340 [ 1231.212953] SyS_read+0xf2/0x210 [ 1231.216309] ? kernel_write+0x110/0x110 [ 1231.220267] ? fput_many+0xe/0x140 [ 1231.223790] ? do_syscall_64+0x4c/0x640 [ 1231.227768] ? kernel_write+0x110/0x110 [ 1231.231734] do_syscall_64+0x1d5/0x640 [ 1231.235622] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1231.240810] RIP: 0033:0x7f0a0e5700f9 [ 1231.244517] RSP: 002b:00007f0a0cae2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1231.252223] RAX: ffffffffffffffda RBX: 00007f0a0e68ff80 RCX: 00007f0a0e5700f9 [ 1231.259490] RDX: 0000000000002020 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1231.266746] RBP: 00007f0a0e5cbae9 R08: 0000000000000000 R09: 0000000000000000 [ 1231.274011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.281271] R13: 00007ffe01c1b51f R14: 00007f0a0cae2300 R15: 0000000000022000 [ 1231.288541] [ 1231.290157] Allocated by task 12832: [ 1231.293866] kasan_kmalloc+0xeb/0x160 [ 1231.297671] kmem_cache_alloc_trace+0x131/0x3d0 [ 1231.302333] __vb2_init_fileio+0x17f/0xa90 [ 1231.306552] __vb2_perform_fileio+0x993/0xda0 [ 1231.311040] vb2_fop_read+0x1ef/0x3d0 [ 1231.314820] v4l2_read+0x19a/0x200 [ 1231.318364] __vfs_read+0xe4/0x620 [ 1231.321901] vfs_read+0x139/0x340 [ 1231.325352] SyS_read+0xf2/0x210 [ 1231.328697] do_syscall_64+0x1d5/0x640 [ 1231.332569] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1231.337739] [ 1231.339349] Freed by task 12824: [ 1231.342700] kasan_slab_free+0xc3/0x1a0 [ 1231.346658] kfree+0xc9/0x250 [ 1231.349771] __vb2_cleanup_fileio+0xf5/0x150 [ 1231.354176] vb2_core_queue_release+0x17/0x70 [ 1231.358673] _vb2_fop_release+0x1c1/0x280 [ 1231.362803] vivid_fop_release+0x17d/0x6c0 [ 1231.367030] v4l2_release+0xf4/0x190 [ 1231.370740] __fput+0x25f/0x7a0 [ 1231.374029] task_work_run+0x11f/0x190 [ 1231.377902] exit_to_usermode_loop+0x1ad/0x200 [ 1231.382466] do_syscall_64+0x4a3/0x640 [ 1231.386343] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1231.391518] [ 1231.393145] The buggy address belongs to the object at ffff88809915db40 [ 1231.393145] which belongs to the cache kmalloc-1024 of size 1024 [ 1231.405975] The buggy address is located 796 bytes inside of [ 1231.405975] 1024-byte region [ffff88809915db40, ffff88809915df40) [ 1231.417929] The buggy address belongs to the page: [ 1231.422867] page:ffffea0002645700 count:1 mapcount:0 mapping:ffff88809915c040 index:0x0 compound_mapcount: 0 [ 1231.432840] flags: 0xfff00000008100(slab|head) [ 1231.437410] raw: 00fff00000008100 ffff88809915c040 0000000000000000 0000000100000007 [ 1231.445287] raw: ffffea00028707a0 ffffea0002a32420 ffff88813fe74ac0 0000000000000000 [ 1231.453161] page dumped because: kasan: bad access detected [ 1231.458947] [ 1231.460560] Memory state around the buggy address: [ 1231.465495] ffff88809915dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1231.472841] ffff88809915dd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 03:49:38 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) 03:49:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080), 0x8001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fchmodat(r2, &(0x7f0000002180)='./file0\x00', 0x4) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 1231.480198] >ffff88809915de00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1231.487540] ^ [ 1231.493770] ffff88809915de80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1231.501635] ffff88809915df00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1231.509156] ================================================================== [ 1231.516507] Disabling lock debugging due to kernel taint [ 1231.542542] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1231.542542] [ 1231.550535] CPU: 0 PID: 12832 Comm: syz-executor.2 Tainted: G B 4.14.306-syzkaller #0 [ 1231.559626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1231.568981] Call Trace: [ 1231.571575] dump_stack+0x1b2/0x281 [ 1231.575213] panic+0x21d/0x451 [ 1231.578414] ? add_taint.cold+0x16/0x16 [ 1231.582384] ? ___preempt_schedule+0x16/0x18 [ 1231.586781] ? preempt_schedule_common+0x45/0xc0 [ 1231.591523] ? ___preempt_schedule+0x16/0x18 [ 1231.595938] check_panic_on_warn.cold+0x19/0x35 [ 1231.600591] kasan_end_report+0x3a/0x40 [ 1231.604545] kasan_report_error.cold+0xa7/0x191 [ 1231.609219] ? __vb2_perform_fileio+0xce9/0xda0 [ 1231.613874] __asan_report_load4_noabort+0x68/0x70 [ 1231.618790] ? __vb2_perform_fileio+0xce9/0xda0 [ 1231.623443] __vb2_perform_fileio+0xce9/0xda0 [ 1231.627931] ? __vb2_init_fileio+0xa90/0xa90 [ 1231.632329] ? aa_file_perm+0x304/0xab0 [ 1231.636290] vb2_fop_read+0x1ef/0x3d0 [ 1231.640099] ? vb2_fop_write+0x3d0/0x3d0 [ 1231.644164] v4l2_read+0x19a/0x200 [ 1231.647697] __vfs_read+0xe4/0x620 [ 1231.651220] ? v4l2_write+0x200/0x200 [ 1231.655014] ? vfs_copy_file_range+0x9b0/0x9b0 [ 1231.659589] ? common_file_perm+0x3ee/0x580 [ 1231.663899] ? lock_acquire+0x170/0x3f0 [ 1231.667878] ? security_file_permission+0x82/0x1e0 [ 1231.672808] ? rw_verify_area+0xe1/0x2a0 [ 1231.676870] vfs_read+0x139/0x340 [ 1231.680313] SyS_read+0xf2/0x210 [ 1231.683691] ? kernel_write+0x110/0x110 [ 1231.687648] ? fput_many+0xe/0x140 [ 1231.691174] ? do_syscall_64+0x4c/0x640 [ 1231.695138] ? kernel_write+0x110/0x110 [ 1231.699112] do_syscall_64+0x1d5/0x640 [ 1231.702986] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1231.708161] RIP: 0033:0x7f0a0e5700f9 [ 1231.711860] RSP: 002b:00007f0a0cae2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1231.719562] RAX: ffffffffffffffda RBX: 00007f0a0e68ff80 RCX: 00007f0a0e5700f9 [ 1231.726995] RDX: 0000000000002020 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1231.734258] RBP: 00007f0a0e5cbae9 R08: 0000000000000000 R09: 0000000000000000 [ 1231.741517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.748777] R13: 00007ffe01c1b51f R14: 00007f0a0cae2300 R15: 0000000000022000 [ 1231.756265] Kernel Offset: disabled [ 1231.759897] Rebooting in 86400 seconds..