Extracting prog: 20m25.618245086s Minimizing prog: 6h7m40.360848365s Simplifying prog options: 12m9.659935536s Extracting C: 5m18.790638831s Simplifying C: 0s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ocfs2_control-ioctl$USBDEVFS_CLEAR_HALT-prlimit64-sched_setscheduler-sendmsg$NFT_BATCH-sched_setaffinity-socket$inet6_mptcp-socket$inet_mptcp-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$tipc-socket$nl_generic-openat$cgroup_ro-socket$inet_tcp-ioctl$sock_SIOCGIFINDEX-bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$PROG_LOAD-openat$cgroup_ro-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$BPF_LINK_CREATE_XDP-syz_emit_ethernet-prctl$PR_SCHED_CORE-openat$vicodec0-ioctl$VIDIOC_REQBUFS-openat$vicodec0-ioctl$VIDIOC_REQBUFS-syz_open_dev$MSR detailed listing: executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000100)={0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000fa8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='rxrpc_tx_data\x00', r0, 0x0, 0x8}, 0x18) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000000033000000950000000066f5ec000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x2, 0x0, 0x1}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$IPVS_CMD_NEW_DAEMON-ioctl$F2FS_IOC_COMPRESS_FILE-socket$nl_netfilter-sendmsg$NFT_BATCH-socket$nl_route-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): userfaultfd-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-openat$kvm-ioctl$KVM_CREATE_VM-socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-ioctl$KVM_CREATE_IRQCHIP-socket$inet_mptcp-setsockopt$inet_tcp_int-ioctl$KVM_CREATE_PIT2-socket-syz_kvm_setup_cpu$x86-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_USER_MEMORY_REGION-openat$ttynull-ioctl$TIOCSETD-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-ioctl$UFFDIO_REGISTER-bpf$MAP_CREATE-close-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$MAP_CREATE detailed listing: executing program 0: r0 = userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0x2}], 0x1c) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x17, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x5) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x9, 0x0, 0x80002004cb, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x9d], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000066000000ddffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program crashed: BUG: corrupted list in _hci_cmd_sync_cancel_entry single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0), &(0x7f0000000080)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r3 = dup(r1) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r3], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r5, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r3 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r3], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r5, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(r2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(r2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, 0x0, &(0x7f0000000080)=0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(r2) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = dup(r2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r4], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r6, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {0x0}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x3f4}, {&(0x7f00000010c0)}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{0x0}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-prctl$PR_SCHED_CORE-openat$sequencer-syz_open_dev$sndmidi-writev-syz_io_uring_setup-openat$ttyprintk-socket$nl_route-sendmsg$nl_route-dup-syz_io_uring_submit-syz_emit_ethernet-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_STREAMON-ioctl$vim2m_VIDIOC_QBUF-ioctl$VIDIOC_S_CTRL-write$uinput_user_dev-ioctl$TIOCVHANGUP-ppoll-bpf$PROG_LOAD-syz_init_net_socket$bt_l2cap-connect$bt_l2cap-writev detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2) program did not crash reproducing took 6h45m34.429696241s repro crashed as (corrupted=false): Bluetooth: hci4: command 0x0406 tx timeout non-paged memory list_del corruption, ffff88802932b700->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:56! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: hci4 hci_conn_timeout RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 lib/list_debug.c:56 Code: 48 c7 c7 e0 7e 15 8c e8 1d 41 b9 fc 90 0f 0b 4c 89 e7 e8 02 f3 1d fd 4c 89 e2 48 89 de 48 c7 c7 40 7f 15 8c e8 00 41 b9 fc 90 <0f> 0b 48 89 ef e8 e5 f2 1d fd 48 89 ea 48 89 de 48 c7 c7 a0 7f 15 RSP: 0018:ffffc90000bb7b78 EFLAGS: 00010282 RAX: 000000000000004e RBX: ffff88802932b700 RCX: ffffffff819b00b9 RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 R13: dffffc0000000000 R14: ffff88802f118618 R15: ffff88802932b700 FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c007642020 CR3: 000000007e2b4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del include/linux/list.h:229 [inline] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 net/bluetooth/hci_sync.c:647 hci_cmd_sync_cancel_entry net/bluetooth/hci_sync.c:851 [inline] hci_cmd_sync_dequeue_once net/bluetooth/hci_sync.c:870 [inline] hci_cancel_connect_sync+0xfa/0x2b0 net/bluetooth/hci_sync.c:6903 hci_abort_conn+0x15a/0x340 net/bluetooth/hci_conn.c:2919 hci_conn_timeout+0x1a2/0x210 net/bluetooth/hci_conn.c:580 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 lib/list_debug.c:56 Code: 48 c7 c7 e0 7e 15 8c e8 1d 41 b9 fc 90 0f 0b 4c 89 e7 e8 02 f3 1d fd 4c 89 e2 48 89 de 48 c7 c7 40 7f 15 8c e8 00 41 b9 fc 90 <0f> 0b 48 89 ef e8 e5 f2 1d fd 48 89 ea 48 89 de 48 c7 c7 a0 7f 15 RSP: 0018:ffffc90000bb7b78 EFLAGS: 00010282 RAX: 000000000000004e RBX: ffff88802932b700 RCX: ffffffff819b00b9 RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 R13: dffffc0000000000 R14: ffff88802f118618 R15: ffff88802932b700 FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd6f9b7e2d8 CR3: 000000007b2b4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 final repro crashed as (corrupted=false): Bluetooth: hci4: command 0x0406 tx timeout non-paged memory list_del corruption, ffff88802932b700->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:56! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: hci4 hci_conn_timeout RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 lib/list_debug.c:56 Code: 48 c7 c7 e0 7e 15 8c e8 1d 41 b9 fc 90 0f 0b 4c 89 e7 e8 02 f3 1d fd 4c 89 e2 48 89 de 48 c7 c7 40 7f 15 8c e8 00 41 b9 fc 90 <0f> 0b 48 89 ef e8 e5 f2 1d fd 48 89 ea 48 89 de 48 c7 c7 a0 7f 15 RSP: 0018:ffffc90000bb7b78 EFLAGS: 00010282 RAX: 000000000000004e RBX: ffff88802932b700 RCX: ffffffff819b00b9 RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 R13: dffffc0000000000 R14: ffff88802f118618 R15: ffff88802932b700 FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c007642020 CR3: 000000007e2b4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del include/linux/list.h:229 [inline] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 net/bluetooth/hci_sync.c:647 hci_cmd_sync_cancel_entry net/bluetooth/hci_sync.c:851 [inline] hci_cmd_sync_dequeue_once net/bluetooth/hci_sync.c:870 [inline] hci_cancel_connect_sync+0xfa/0x2b0 net/bluetooth/hci_sync.c:6903 hci_abort_conn+0x15a/0x340 net/bluetooth/hci_conn.c:2919 hci_conn_timeout+0x1a2/0x210 net/bluetooth/hci_conn.c:580 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 lib/list_debug.c:56 Code: 48 c7 c7 e0 7e 15 8c e8 1d 41 b9 fc 90 0f 0b 4c 89 e7 e8 02 f3 1d fd 4c 89 e2 48 89 de 48 c7 c7 40 7f 15 8c e8 00 41 b9 fc 90 <0f> 0b 48 89 ef e8 e5 f2 1d fd 48 89 ea 48 89 de 48 c7 c7 a0 7f 15 RSP: 0018:ffffc90000bb7b78 EFLAGS: 00010282 RAX: 000000000000004e RBX: ffff88802932b700 RCX: ffffffff819b00b9 RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: dead000000000100 R13: dffffc0000000000 R14: ffff88802f118618 R15: ffff88802932b700 FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd6f9b7e2d8 CR3: 000000007b2b4000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400