25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:57 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2049.117011] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2049.124272] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2049.131523] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2049.138809] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:06:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) [ 2049.196362] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2049.209975] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2049.218774] CPU: 0 PID: 21176 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2049.226673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2049.236023] Call Trace: [ 2049.238619] dump_stack+0x1b2/0x281 [ 2049.242254] warn_alloc.cold+0x96/0x1cc [ 2049.246229] ? zone_watermark_ok_safe+0x220/0x220 [ 2049.251084] ? trace_hardirqs_on+0x10/0x10 [ 2049.255322] ? deref_stack_reg+0x124/0x1a0 [ 2049.259565] ? fs_reclaim_release+0xd0/0x110 [ 2049.263980] __vmalloc_node_range+0x10e/0x150 [ 2049.268496] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2049.273858] vmalloc_user+0x47/0xa0 [ 2049.277486] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2049.281805] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2049.287173] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2049.291336] __vb2_queue_alloc+0x47a/0xd90 [ 2049.295585] vb2_core_create_bufs+0x279/0x5a0 [ 2049.300112] ? __vb2_queue_free+0x7a0/0x7a0 [ 2049.304430] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2049.309776] ? trace_hardirqs_on+0x10/0x10 [ 2049.313991] vb2_create_bufs+0x2e1/0x5b0 [ 2049.318047] ? vb2_thread_start+0x310/0x310 [ 2049.322364] v4l_create_bufs+0xa4/0x150 [ 2049.326321] __video_do_ioctl+0x65b/0x6a0 [ 2049.330453] ? video_ioctl2+0x30/0x30 [ 2049.334250] ? __might_fault+0x177/0x1b0 [ 2049.338297] ? video_ioctl2+0x30/0x30 [ 2049.342085] video_usercopy+0xfd/0xe70 [ 2049.345972] ? v4l_g_ctrl+0x390/0x390 [ 2049.349753] ? lock_acquire+0x170/0x3f0 [ 2049.353727] ? lock_downgrade+0x740/0x740 [ 2049.357866] ? trace_hardirqs_on+0x10/0x10 [ 2049.362089] ? futex_exit_release+0x220/0x220 [ 2049.375597] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2049.380683] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2049.385693] v4l2_ioctl+0x1bb/0x2f0 [ 2049.389301] ? v4l2_open+0x2f0/0x2f0 [ 2049.393011] do_vfs_ioctl+0x75a/0xff0 [ 2049.396791] ? ioctl_preallocate+0x1a0/0x1a0 [ 2049.401196] ? lock_downgrade+0x740/0x740 [ 2049.405335] ? __fget+0x225/0x360 [ 2049.408783] ? do_vfs_ioctl+0xff0/0xff0 [ 2049.412758] ? security_file_ioctl+0x83/0xb0 [ 2049.417156] SyS_ioctl+0x7f/0xb0 [ 2049.420528] ? do_vfs_ioctl+0xff0/0xff0 [ 2049.424485] do_syscall_64+0x1d5/0x640 [ 2049.428357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2049.433524] RIP: 0033:0x466459 [ 2049.436693] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:06:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:06:58 executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffff9, @empty, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="78624eaa01f10f3a85849dd1fd0c72ca1ef5bd87a601abdede55e5f2a931982f9a93ac833f87f674a22495163a6ca91b1ad2ef907bd8485ff2176ffb76cd2307951598bbeda974f6fb8a9ff99ba2b1ec4b070888778b19a93043565765cecfc4fa69af4d1e304a1ff982a62e07c0bca3f01e43fb7fdc6be1675169514e1543362c63290e6d92677a688abb03d74a61489d09f9b33d7d88e85c5bd455d385e07a61bf77037b67878c61eb34afa8b8769e03d1adbb5ae2b9006a8755bbda4269dfd6b1b9cdc355e2ff8acb2a0f9d7e8efcf4feba75a540fbca07366697fbda10577bf5ccae8d297910ecaaca2c43eb", 0xee}, {&(0x7f00000002c0)="25ad81b12ddec905a4b5090555f7772114775590ad4df87a9bee97b1c73d9979295bb0f8d4b5872327326b92a2869075e538270d2005358793fc66a28c9e34cf6fce338fb70d31e7182da1ab757abea9d4f73bb09b56e82a2badaac120fb249aa6190af777e7aade894b40354b75161b1b06dcc4249df720ac92f8dec6e88ac6e7bc7981b99273b79133a237f9b1d49172c0da80e17999d5441227995877", 0x9e}, {&(0x7f0000000380)="c7ea6d79dc8d2c0afc0753473c44a210f76a11f6091519e05ec3d412c6187db6d9ec321f38044797814e66dae8b9dc2650f0277762c0d3629e8b67922070ad9f0e7f29dd2b473dc3", 0x48}, {&(0x7f0000000400)="c51e940f0c5f7f6abe101b9ba095e6ca2b5fc73ae3a3779847caa35dd7785dee76a7c7dba4831614f758c231e7ed588218b919500e", 0x35}], 0x4}, 0x4000040) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x800001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x33}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x1405, 0x20, 0x70bd26, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1c07987459afa5f) [ 2049.444387] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2049.451647] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2049.458902] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2049.466173] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2049.473434] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 [ 2049.490116] warn_alloc_show_mem: 1 callbacks suppressed [ 2049.490120] Mem-Info: 13:06:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2049.501571] active_anon:86691 inactive_anon:25004 isolated_anon:0 [ 2049.501571] active_file:2198 inactive_file:8493 isolated_file:0 [ 2049.501571] unevictable:0 dirty:279 writeback:0 unstable:0 [ 2049.501571] slab_reclaimable:14450 slab_unreclaimable:127393 [ 2049.501571] mapped:59027 shmem:25364 pagetables:6911 bounce:0 [ 2049.501571] free:1357982 free_pcp:236 free_cma:0 13:06:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) 13:06:58 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2049.547823] Node 0 active_anon:348592kB inactive_anon:51248kB active_file:4736kB inactive_file:31764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232104kB dirty:1064kB writeback:0kB shmem:52304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 251904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.547843] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2049.547848] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 13:06:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) 13:06:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) [ 2049.547869] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2049.547891] Node 0 DMA32 free:1441120kB min:36200kB low:45248kB high:54296kB active_anon:348592kB inactive_anon:51248kB active_file:4736kB inactive_file:31764kB unevictable:0kB writepending:1064kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15744kB pagetables:27792kB bounce:0kB free_pcp:860kB local_pcp:244kB free_cma:0kB 13:06:58 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2049.547914] lowmem_reserve[]: 0 0 0 0 0 [ 2049.547934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.547954] lowmem_reserve[]: 0 0 0 0 0 13:06:58 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2049.547975] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.547997] lowmem_reserve[]: 0 0 0 0 0 [ 2049.548018] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2049.548103] Node 0 DMA32: 1256*4kB (UME) 2832*8kB (UME) 3059*16kB (UME) 2353*32kB (UE) 4377*64kB (UM) 2115*128kB (U) 714*256kB (UM) 353*512kB (UM) 156*1024kB (U) 103*2048kB (U) 1*4096kB (U) = 1441072kB [ 2049.548245] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2049.548297] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2049.548479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.548636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:06:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) 13:06:58 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:58 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) [ 2049.548643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2049.548649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.548653] 33117 total pagecache pages [ 2049.548671] 0 pages in swap cache [ 2049.548677] Swap cache stats: add 0, delete 0, find 0/0 [ 2049.548681] Free swap = 0kB [ 2049.548684] Total swap = 0kB [ 2049.548690] 2097051 pages RAM [ 2049.548695] 0 pages HighMem/MovableOnly [ 2049.548698] 363849 pages reserved [ 2049.548701] 0 pages cma reserved [ 2050.184221] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2050.199688] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2050.204998] CPU: 1 PID: 21245 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2050.212881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.222241] Call Trace: [ 2050.224832] dump_stack+0x1b2/0x281 [ 2050.228456] warn_alloc.cold+0x96/0x1cc [ 2050.232416] ? zone_watermark_ok_safe+0x220/0x220 [ 2050.237266] ? trace_hardirqs_on+0x10/0x10 [ 2050.241491] ? deref_stack_reg+0x124/0x1a0 [ 2050.245710] ? fs_reclaim_release+0xd0/0x110 [ 2050.250117] __vmalloc_node_range+0x10e/0x150 [ 2050.254598] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2050.259958] vmalloc_user+0x47/0xa0 [ 2050.263566] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2050.267865] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2050.273232] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2050.277377] __vb2_queue_alloc+0x47a/0xd90 [ 2050.281599] vb2_core_create_bufs+0x279/0x5a0 [ 2050.286080] ? __vb2_queue_free+0x7a0/0x7a0 [ 2050.290394] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2050.295767] ? trace_hardirqs_on+0x10/0x10 [ 2050.299985] vb2_create_bufs+0x2e1/0x5b0 [ 2050.304028] ? vb2_thread_start+0x310/0x310 [ 2050.308355] v4l_create_bufs+0xa4/0x150 [ 2050.312326] __video_do_ioctl+0x65b/0x6a0 [ 2050.316481] ? video_ioctl2+0x30/0x30 [ 2050.320281] ? __might_fault+0x177/0x1b0 [ 2050.324331] ? video_ioctl2+0x30/0x30 [ 2050.328125] video_usercopy+0xfd/0xe70 [ 2050.331995] ? v4l_g_ctrl+0x390/0x390 [ 2050.335777] ? lock_acquire+0x170/0x3f0 [ 2050.339749] ? lock_downgrade+0x740/0x740 [ 2050.343876] ? trace_hardirqs_on+0x10/0x10 [ 2050.348091] ? futex_exit_release+0x220/0x220 [ 2050.352568] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2050.357651] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2050.362647] v4l2_ioctl+0x1bb/0x2f0 [ 2050.366254] ? v4l2_open+0x2f0/0x2f0 [ 2050.369963] do_vfs_ioctl+0x75a/0xff0 [ 2050.373747] ? ioctl_preallocate+0x1a0/0x1a0 [ 2050.378136] ? lock_downgrade+0x740/0x740 [ 2050.382368] ? __fget+0x225/0x360 [ 2050.385812] ? do_vfs_ioctl+0xff0/0xff0 [ 2050.389788] ? security_file_ioctl+0x83/0xb0 [ 2050.394191] SyS_ioctl+0x7f/0xb0 [ 2050.397536] ? do_vfs_ioctl+0xff0/0xff0 [ 2050.401496] do_syscall_64+0x1d5/0x640 [ 2050.405376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2050.410558] RIP: 0033:0x466459 [ 2050.413740] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2050.421431] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 13:06:59 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffff9, @empty, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="78624eaa01f10f3a85849dd1fd0c72ca1ef5bd87a601abdede55e5f2a931982f9a93ac833f87f674a22495163a6ca91b1ad2ef907bd8485ff2176ffb76cd2307951598bbeda974f6fb8a9ff99ba2b1ec4b070888778b19a93043565765cecfc4fa69af4d1e304a1ff982a62e07c0bca3f01e43fb7fdc6be1675169514e1543362c63290e6d92677a688abb03d74a61489d09f9b33d7d88e85c5bd455d385e07a61bf77037b67878c61eb34afa8b8769e03d1adbb5ae2b9006a8755bbda4269dfd6b1b9cdc355e2ff8acb2a0f9d7e8efcf4feba75a540fbca07366697fbda10577bf5ccae8d297910ecaaca2c43eb", 0xee}, {&(0x7f00000002c0)="25ad81b12ddec905a4b5090555f7772114775590ad4df87a9bee97b1c73d9979295bb0f8d4b5872327326b92a2869075e538270d2005358793fc66a28c9e34cf6fce338fb70d31e7182da1ab757abea9d4f73bb09b56e82a2badaac120fb249aa6190af777e7aade894b40354b75161b1b06dcc4249df720ac92f8dec6e88ac6e7bc7981b99273b79133a237f9b1d49172c0da80e17999d5441227995877", 0x9e}, {&(0x7f0000000380)="c7ea6d79dc8d2c0afc0753473c44a210f76a11f6091519e05ec3d412c6187db6d9ec321f38044797814e66dae8b9dc2650f0277762c0d3629e8b67922070ad9f0e7f29dd2b473dc3", 0x48}, {&(0x7f0000000400)="c51e940f0c5f7f6abe101b9ba095e6ca2b5fc73ae3a3779847caa35dd7785dee76a7c7dba4831614f758c231e7ed588218b919500e", 0x35}], 0x4}, 0x4000040) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x800001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x33}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x1405, 0x20, 0x70bd26, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1c07987459afa5f) 13:06:59 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2050.428686] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2050.435942] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2050.443193] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2050.450445] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:06:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) 13:06:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:59 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 3: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000100)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, [], 0x1}}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000140)="f0dd0b1c61d5b4ccd233051bb21d5a79521f3140c229f7c961ec8d2d5fc599f7d013f88ecaabe31a3b093a19b5285377e61f01f6a77df095dd811f88e283658906a0e67fa39ac998a6a599b716664a31eb19d40a49e56f67888b4d8ebd1e6e457c30da2c2efea7c768f8c2c53fa962552f7da1a48a65e50a7b96502ffbb874e945884213", 0x84}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="3b116f4f2c0614220c3d670e98ed326f687a88a6dd84d7afb0bfb3288100baaa59d70aeea2560b1b5d31eae2382ffbe9ba6d5e2a52e91012efcd659fdd2f83ed0635052d824c9fcfa6758cf5558fb41f17743cb28376e70b37ef5f862d34d567ce15ab0506305a654961ca637495b84ea108fe3f56dd461b46aaed183414c0c8c171b4aaf160b2bbfa18e509b185cdefacceb43b1a26e278c098b16889cd2e0da2d3991f4d50655832d3f6fcdca5", 0xae}, {&(0x7f00000012c0)="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", 0xfb}, {&(0x7f00000013c0)="0d7186e899374650cf109d74d855934ddafc5b4f0aec89d7aa093df34b9b987797bb61ed187e0dfbe22b41fc72289e43565330dab20e58ade82a1487aadcebc68e1ddd49f9c6011e43c0be94ef58af50debdabf4eb632b15ba4592d2637a087b3cf96a1b9c1330d7b5e968a0", 0x6c}, {&(0x7f0000001440)="79ca7520f91fc554d43ec2ba75477277e470264aec343076839da9c51deec9b549d35f94d8a6dfe5c5e694ec8ebe06d847f957a7ae08226ceb61926d52b61168689a0c08e4b96cfa2b56c52108e8178d83bcc50a0e45b8172cdc4aeb7ed30723d6b6b66711e76bc3a58b818d386aa78ea37ecf1970", 0x75}, {&(0x7f00000014c0)="754aa7cd2bec", 0x6}, {&(0x7f0000001500)="3bd7e58dd2860f", 0x7}, {&(0x7f0000001540)="8d8ddcdd61ac705f434d0e46d7c99d962da439d94e1c3a221d8beec991ac9a30da00e86e0de1", 0x26}, {&(0x7f0000001580)="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", 0xfa}], 0xa}, 0x20004814) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vim2m\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000017c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001800)={0x9, 0x3, 0x4, 0x10, 0x4, {0x0, 0x2710}, {0x5, 0x0, 0x0, 0x20, 0x20, 0x9, "2033dab9"}, 0x7, 0x2, @offset, 0xfffff656, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000001880)={0xffff8000, 0x3, 0x4, 0x800, 0x8, {r2, r3/1000+60000}, {0x4, 0x8, 0x21, 0x8, 0x8, 0x6, "60948211"}, 0x40, 0x4, @offset=0x1, 0x6, 0x0, r4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}}) 13:06:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:06:59 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2050.961473] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2050.973021] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2050.979376] CPU: 0 PID: 21302 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2050.987271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.996619] Call Trace: [ 2050.999208] dump_stack+0x1b2/0x281 [ 2051.002844] warn_alloc.cold+0x96/0x1cc [ 2051.006820] ? zone_watermark_ok_safe+0x220/0x220 [ 2051.011660] ? trace_hardirqs_on+0x10/0x10 [ 2051.015896] ? deref_stack_reg+0x124/0x1a0 [ 2051.020134] ? fs_reclaim_release+0xd0/0x110 [ 2051.024550] __vmalloc_node_range+0x10e/0x150 [ 2051.029048] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2051.034406] vmalloc_user+0x47/0xa0 [ 2051.038033] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2051.042354] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2051.047718] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2051.051869] __vb2_queue_alloc+0x47a/0xd90 [ 2051.056123] vb2_core_create_bufs+0x279/0x5a0 13:06:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:06:59 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2051.060622] ? __vb2_queue_free+0x7a0/0x7a0 [ 2051.064950] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2051.070316] ? trace_hardirqs_on+0x10/0x10 [ 2051.074554] vb2_create_bufs+0x2e1/0x5b0 [ 2051.078628] ? vb2_thread_start+0x310/0x310 [ 2051.082953] v4l_create_bufs+0xa4/0x150 [ 2051.086955] __video_do_ioctl+0x65b/0x6a0 [ 2051.091110] ? video_ioctl2+0x30/0x30 [ 2051.094901] ? __might_fault+0x177/0x1b0 [ 2051.098966] ? video_ioctl2+0x30/0x30 [ 2051.102758] video_usercopy+0xfd/0xe70 [ 2051.106632] ? v4l_g_ctrl+0x390/0x390 [ 2051.110419] ? lock_acquire+0x170/0x3f0 [ 2051.114392] ? lock_downgrade+0x740/0x740 [ 2051.118547] ? trace_hardirqs_on+0x10/0x10 [ 2051.122780] ? futex_exit_release+0x220/0x220 [ 2051.127268] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2051.132377] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2051.137376] v4l2_ioctl+0x1bb/0x2f0 [ 2051.140984] ? v4l2_open+0x2f0/0x2f0 [ 2051.144677] do_vfs_ioctl+0x75a/0xff0 [ 2051.148469] ? ioctl_preallocate+0x1a0/0x1a0 [ 2051.152864] ? lock_downgrade+0x740/0x740 [ 2051.157002] ? __fget+0x225/0x360 [ 2051.160452] ? do_vfs_ioctl+0xff0/0xff0 [ 2051.164416] ? security_file_ioctl+0x83/0xb0 [ 2051.168813] SyS_ioctl+0x7f/0xb0 [ 2051.172166] ? do_vfs_ioctl+0xff0/0xff0 [ 2051.176130] do_syscall_64+0x1d5/0x640 [ 2051.180000] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2051.185167] RIP: 0033:0x466459 [ 2051.188339] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2051.196042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2051.203300] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2051.210554] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2051.217810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2051.225059] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2051.237069] warn_alloc_show_mem: 1 callbacks suppressed [ 2051.237073] Mem-Info: [ 2051.245070] active_anon:86166 inactive_anon:25179 isolated_anon:0 [ 2051.245070] active_file:2198 inactive_file:8507 isolated_file:0 [ 2051.245070] unevictable:0 dirty:299 writeback:0 unstable:0 [ 2051.245070] slab_reclaimable:14446 slab_unreclaimable:127377 [ 2051.245070] mapped:58991 shmem:25539 pagetables:6837 bounce:0 [ 2051.245070] free:1358208 free_pcp:340 free_cma:0 [ 2051.282720] Node 0 active_anon:344300kB inactive_anon:59408kB active_file:4736kB inactive_file:31820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:231800kB dirty:1144kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2051.311667] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2051.339367] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2051.365685] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2051.370846] Node 0 DMA32 free:1437032kB min:36200kB low:45248kB high:54296kB active_anon:344300kB inactive_anon:59408kB active_file:4736kB inactive_file:31820kB unevictable:0kB writepending:1148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15552kB pagetables:27444kB bounce:0kB free_pcp:1316kB local_pcp:660kB free_cma:0kB [ 2051.401253] lowmem_reserve[]: 0 0 0 0 0 [ 2051.405250] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2051.431405] lowmem_reserve[]: 0 0 0 0 0 [ 2051.435431] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2051.464167] lowmem_reserve[]: 0 0 0 0 0 [ 2051.468229] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2051.483159] Node 0 DMA32: 1329*4kB (UME) 3512*8kB (UME) 2819*16kB (UME) 2224*32kB (UE) 4363*64kB (UM) 2124*128kB (U) 717*256kB (UM) 353*512kB (U) 157*1024kB (UM) 103*2048kB (U) 0*4096kB = 1436788kB [ 2051.501056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2051.511847] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2051.530302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2051.539207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2051.547875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2051.556716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2051.565881] 35186 total pagecache pages [ 2051.569991] 0 pages in swap cache [ 2051.573459] Swap cache stats: add 0, delete 0, find 0/0 [ 2051.578872] Free swap = 0kB [ 2051.581899] Total swap = 0kB [ 2051.584908] 2097051 pages RAM [ 2051.588095] 0 pages HighMem/MovableOnly [ 2051.592080] 363849 pages reserved [ 2051.595508] 0 pages cma reserved 13:07:00 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x39d7, 0x0, 0x0, 0x7fff]}}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0xfffffc63, 0xe, 0x7}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x4044810) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="200026bd0005000f0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740)='nl802154\x00', r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="08000300c6a32313e915ffe742d6722c6ad1cb600b30d9ba24074531dc4b5831fe878314f06b8b21db78f09c3064fab9c64ac501aa2d613a7366ebe8142f4907148dff927dcd7451f47609d4a5c30ec0dc88bd948bfab709b340a8e9fca3f95d4db60f877fd15533b64c007d7eacb6b8933c3f1da536b6e53f8fdb4053d6e60c2de49bbf53a500ceb18be60be2dabe94df", @ANYRES32=r10, @ANYBLOB="0c00060002000000000000000c00228005000400010000000c000600020000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c0006000100000001000000"], 0x5c}}, 0x4000010) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25110000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600020000009aec4b658ff26a32", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0xc890) 13:07:00 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:00 executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2051.758372] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2051.761940] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2051.784578] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2051.791086] CPU: 0 PID: 21326 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2051.798976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.808332] Call Trace: [ 2051.810934] dump_stack+0x1b2/0x281 [ 2051.814744] warn_alloc.cold+0x96/0x1cc [ 2051.818719] ? zone_watermark_ok_safe+0x220/0x220 [ 2051.823560] ? trace_hardirqs_on+0x10/0x10 [ 2051.827796] ? deref_stack_reg+0x124/0x1a0 [ 2051.832068] ? fs_reclaim_release+0xd0/0x110 [ 2051.836486] __vmalloc_node_range+0x10e/0x150 [ 2051.840993] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2051.846355] vmalloc_user+0x47/0xa0 [ 2051.849986] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2051.854310] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2051.859847] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2051.864001] __vb2_queue_alloc+0x47a/0xd90 [ 2051.868277] vb2_core_create_bufs+0x279/0x5a0 [ 2051.872781] ? __vb2_queue_free+0x7a0/0x7a0 [ 2051.877109] ? lock_acquire+0x170/0x3f0 [ 2051.881105] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2051.886471] ? trace_hardirqs_on+0x10/0x10 [ 2051.890709] vb2_create_bufs+0x2e1/0x5b0 [ 2051.894775] ? vb2_thread_start+0x310/0x310 [ 2051.899116] ? lock_acquire+0x170/0x3f0 [ 2051.903098] v4l_create_bufs+0xa4/0x150 [ 2051.907075] __video_do_ioctl+0x65b/0x6a0 [ 2051.911228] ? video_ioctl2+0x30/0x30 [ 2051.915034] ? __might_fault+0x177/0x1b0 [ 2051.919096] ? video_ioctl2+0x30/0x30 [ 2051.922907] video_usercopy+0xfd/0xe70 [ 2051.926801] ? v4l_g_ctrl+0x390/0x390 [ 2051.930605] ? lock_acquire+0x170/0x3f0 [ 2051.934583] ? lock_downgrade+0x740/0x740 [ 2051.938736] ? trace_hardirqs_on+0x10/0x10 [ 2051.942974] ? futex_exit_release+0x220/0x220 [ 2051.947472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2051.952577] ? debug_check_no_obj_freed+0x2c0/0x680 13:07:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x80, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2051.957597] v4l2_ioctl+0x1bb/0x2f0 [ 2051.961225] ? v4l2_open+0x2f0/0x2f0 [ 2051.965026] do_vfs_ioctl+0x75a/0xff0 [ 2051.968831] ? ioctl_preallocate+0x1a0/0x1a0 [ 2051.973240] ? lock_downgrade+0x740/0x740 [ 2051.977422] ? __fget+0x225/0x360 [ 2051.980968] ? do_vfs_ioctl+0xff0/0xff0 [ 2051.984944] ? security_file_ioctl+0x83/0xb0 [ 2051.989353] SyS_ioctl+0x7f/0xb0 [ 2051.992716] ? do_vfs_ioctl+0xff0/0xff0 [ 2051.996692] do_syscall_64+0x1d5/0x640 [ 2052.000587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2052.005773] RIP: 0033:0x466459 13:07:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x39d7, 0x0, 0x0, 0x7fff]}}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0xfffffc63, 0xe, 0x7}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x4044810) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="200026bd0005000f0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740)='nl802154\x00', r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="08000300c6a32313e915ffe742d6722c6ad1cb600b30d9ba24074531dc4b5831fe878314f06b8b21db78f09c3064fab9c64ac501aa2d613a7366ebe8142f4907148dff927dcd7451f47609d4a5c30ec0dc88bd948bfab709b340a8e9fca3f95d4db60f877fd15533b64c007d7eacb6b8933c3f1da536b6e53f8fdb4053d6e60c2de49bbf53a500ceb18be60be2dabe94df", @ANYRES32=r10, @ANYBLOB="0c00060002000000000000000c00228005000400010000000c000600020000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c0006000100000001000000"], 0x5c}}, 0x4000010) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25110000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600020000009aec4b658ff26a32", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0xc890) 13:07:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2052.008978] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2052.016690] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2052.023955] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2052.031311] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2052.038588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2052.045858] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 13:07:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x6, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:00 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:00 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:00 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2052.167705] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 13:07:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000180)="d2", 0x1}, {&(0x7f0000000240)="fd", 0x1}], 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x140d, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}}) 13:07:01 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2052.244881] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:01 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2052.306648] syz-executor.4 cpuset=/ mems_allowed=0-1 13:07:01 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2052.326812] CPU: 1 PID: 21378 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2052.334731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.344081] Call Trace: [ 2052.346670] dump_stack+0x1b2/0x281 [ 2052.350325] warn_alloc.cold+0x96/0x1cc [ 2052.354342] ? zone_watermark_ok_safe+0x220/0x220 [ 2052.359274] ? trace_hardirqs_on+0x10/0x10 [ 2052.363510] ? deref_stack_reg+0x124/0x1a0 [ 2052.367747] ? fs_reclaim_release+0xd0/0x110 [ 2052.372160] __vmalloc_node_range+0x10e/0x150 [ 2052.376666] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2052.382036] vmalloc_user+0x47/0xa0 [ 2052.385666] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2052.389991] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2052.395358] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2052.399511] __vb2_queue_alloc+0x47a/0xd90 [ 2052.403762] vb2_core_create_bufs+0x279/0x5a0 [ 2052.408258] ? __vb2_queue_free+0x7a0/0x7a0 [ 2052.412586] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2052.417953] ? trace_hardirqs_on+0x10/0x10 [ 2052.422200] vb2_create_bufs+0x2e1/0x5b0 [ 2052.426269] ? vb2_thread_start+0x310/0x310 [ 2052.430642] v4l_create_bufs+0xa4/0x150 [ 2052.434620] __video_do_ioctl+0x65b/0x6a0 [ 2052.438776] ? video_ioctl2+0x30/0x30 [ 2052.442578] ? __might_fault+0x177/0x1b0 [ 2052.446647] ? video_ioctl2+0x30/0x30 [ 2052.450449] video_usercopy+0xfd/0xe70 [ 2052.454349] ? v4l_g_ctrl+0x390/0x390 [ 2052.458149] ? lock_acquire+0x170/0x3f0 [ 2052.462120] ? lock_downgrade+0x740/0x740 [ 2052.466259] ? trace_hardirqs_on+0x10/0x10 [ 2052.470477] ? futex_exit_release+0x220/0x220 [ 2052.474997] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2052.480093] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2052.485102] v4l2_ioctl+0x1bb/0x2f0 [ 2052.488806] ? v4l2_open+0x2f0/0x2f0 [ 2052.492530] do_vfs_ioctl+0x75a/0xff0 [ 2052.496326] ? ioctl_preallocate+0x1a0/0x1a0 [ 2052.500723] ? lock_downgrade+0x740/0x740 [ 2052.504853] ? __fget+0x225/0x360 [ 2052.508340] ? do_vfs_ioctl+0xff0/0xff0 [ 2052.512364] ? security_file_ioctl+0x83/0xb0 [ 2052.516770] SyS_ioctl+0x7f/0xb0 [ 2052.520131] ? do_vfs_ioctl+0xff0/0xff0 [ 2052.524095] do_syscall_64+0x1d5/0x640 [ 2052.527970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2052.533148] RIP: 0033:0x466459 [ 2052.536315] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2052.544067] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2052.551344] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2052.558594] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2052.565844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2052.573092] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2052.598504] warn_alloc_show_mem: 1 callbacks suppressed [ 2052.598508] Mem-Info: [ 2052.606446] active_anon:86700 inactive_anon:27052 isolated_anon:0 [ 2052.606446] active_file:2210 inactive_file:8503 isolated_file:0 [ 2052.606446] unevictable:0 dirty:308 writeback:0 unstable:0 [ 2052.606446] slab_reclaimable:14471 slab_unreclaimable:127580 [ 2052.606446] mapped:59034 shmem:27412 pagetables:6895 bounce:0 [ 2052.606446] free:1355641 free_pcp:209 free_cma:0 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2052.650292] Node 0 active_anon:344336kB inactive_anon:59440kB active_file:4784kB inactive_file:31804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:231832kB dirty:1180kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2052.688806] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2052.716763] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2052.745440] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2052.751606] Node 0 DMA32 free:1438664kB min:36200kB low:45248kB high:54296kB active_anon:344308kB inactive_anon:59440kB active_file:4784kB inactive_file:31824kB unevictable:0kB writepending:1200kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15584kB pagetables:27404kB bounce:0kB free_pcp:912kB local_pcp:352kB free_cma:0kB [ 2052.783441] lowmem_reserve[]: 0 0 0 0 0 [ 2052.787991] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2052.814060] lowmem_reserve[]: 0 0 0 0 0 [ 2052.818598] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2052.847859] lowmem_reserve[]: 0 0 0 0 0 [ 2052.851840] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2052.868267] Node 0 DMA32: 1211*4kB (UME) 2477*8kB (UME) 3187*16kB (UME) 2285*32kB (UE) 4336*64kB (UM) 2119*128kB (UM) 728*256kB (UM) 355*512kB (UM) 155*1024kB (U) 104*2048kB (UM) 0*4096kB = 1437348kB [ 2052.886349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2052.897925] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2052.916741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2052.926179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2052.936105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:01 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) [ 2052.945491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2052.954613] 35194 total pagecache pages [ 2052.959068] 0 pages in swap cache [ 2052.962560] Swap cache stats: add 0, delete 0, find 0/0 [ 2052.968889] Free swap = 0kB [ 2052.971909] Total swap = 0kB [ 2052.974924] 2097051 pages RAM [ 2052.979031] 0 pages HighMem/MovableOnly [ 2052.982999] 363849 pages reserved [ 2052.986441] 0 pages cma reserved 13:07:01 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:01 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2053.247076] Bluetooth: hci3 command 0x0406 tx timeout 13:07:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x101, 0xfffffffd, 0xffffffff}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)}) 13:07:02 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:02 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:02 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28000c}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000e1404002cbd7000fedbdf25080003000000000ebbc57633bbeb673ee01e215f878bb9000800030002000000080001000100000008003e0004000000000000000000000008d9010002000000080001000000000040e4d2045ed85841c026fe3daa42720066f891dff509f5b2229212efa2cda578a64b7a1688f484b8cd67db32eb4533329fe1ef6277b4b103437b9c93ad4ba00f771c5a6fb6d95fb3019b4c984afcd679fb863a05d709090ff7aa95316a0bbfcd616c8afd7e9b45d51dd38bb2d024c0f7ca57ffde4771a4c6074870e0e9f92ab31f2e270b"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x39d7, 0x0, 0x0, 0x7fff]}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000003080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x5, 0x3, 0x4, 0x8, 0xae40, {r2, r3/1000+10000}, {0x4, 0xc, 0x1, 0x0, 0x1b, 0x80, "dc913b5e"}, 0x13, 0x4, @userptr=0x1, 0x7f}) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28000c}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000e1404002cbd7000fedbdf25080003000000000ebbc57633bbeb673ee01e215f878bb9000800030002000000080001000100000008003e0004000000000000000000000008d9010002000000080001000000000040e4d2045ed85841c026fe3daa42720066f891dff509f5b2229212efa2cda578a64b7a1688f484b8cd67db32eb4533329fe1ef6277b4b103437b9c93ad4ba00f771c5a6fb6d95fb3019b4c984afcd679fb863a05d709090ff7aa95316a0bbfcd616c8afd7e9b45d51dd38bb2d024c0f7ca57ffde4771a4c6074870e0e9f92ab31f2e270b"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x39d7, 0x0, 0x0, 0x7fff]}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000003080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x5, 0x3, 0x4, 0x8, 0xae40, {r2, r3/1000+10000}, {0x4, 0xc, 0x1, 0x0, 0x1b, 0x80, "dc913b5e"}, 0x13, 0x4, @userptr=0x1, 0x7f}) 13:07:02 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:02 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:02 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:02 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) [ 2054.145492] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2054.164492] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2054.183854] CPU: 0 PID: 21556 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2054.191778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.201134] Call Trace: [ 2054.203717] dump_stack+0x1b2/0x281 [ 2054.207340] warn_alloc.cold+0x96/0x1cc [ 2054.211315] ? zone_watermark_ok_safe+0x220/0x220 [ 2054.216151] ? trace_hardirqs_on+0x10/0x10 [ 2054.220404] ? deref_stack_reg+0x124/0x1a0 [ 2054.224673] ? fs_reclaim_release+0xd0/0x110 [ 2054.229076] __vmalloc_node_range+0x10e/0x150 [ 2054.233581] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2054.238933] vmalloc_user+0x47/0xa0 [ 2054.242539] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2054.246933] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2054.252286] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2054.256414] __vb2_queue_alloc+0x47a/0xd90 [ 2054.260640] vb2_core_create_bufs+0x279/0x5a0 [ 2054.265115] ? __vb2_queue_free+0x7a0/0x7a0 [ 2054.269417] ? futex_wait+0x42f/0x5a0 [ 2054.273199] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2054.278558] ? trace_hardirqs_on+0x10/0x10 [ 2054.282804] vb2_create_bufs+0x2e1/0x5b0 [ 2054.286850] ? vb2_thread_start+0x310/0x310 [ 2054.291161] ? futex_wait+0x42f/0x5a0 [ 2054.294952] v4l_create_bufs+0xa4/0x150 [ 2054.298916] __video_do_ioctl+0x65b/0x6a0 [ 2054.303050] ? video_ioctl2+0x30/0x30 [ 2054.306838] ? __might_fault+0x177/0x1b0 [ 2054.310967] ? video_ioctl2+0x30/0x30 [ 2054.314748] video_usercopy+0xfd/0xe70 [ 2054.318627] ? v4l_g_ctrl+0x390/0x390 [ 2054.322416] ? lock_acquire+0x170/0x3f0 [ 2054.326392] ? lock_downgrade+0x740/0x740 [ 2054.330539] ? trace_hardirqs_on+0x10/0x10 [ 2054.334755] ? futex_exit_release+0x220/0x220 [ 2054.339247] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2054.344343] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2054.349339] v4l2_ioctl+0x1bb/0x2f0 [ 2054.352944] ? v4l2_open+0x2f0/0x2f0 [ 2054.356638] do_vfs_ioctl+0x75a/0xff0 [ 2054.360418] ? ioctl_preallocate+0x1a0/0x1a0 [ 2054.364806] ? lock_downgrade+0x740/0x740 [ 2054.369032] ? __fget+0x225/0x360 [ 2054.372478] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.376448] ? security_file_ioctl+0x83/0xb0 [ 2054.380839] SyS_ioctl+0x7f/0xb0 [ 2054.384199] ? do_vfs_ioctl+0xff0/0xff0 [ 2054.388154] do_syscall_64+0x1d5/0x640 13:07:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2054.392025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2054.397208] RIP: 0033:0x466459 [ 2054.400385] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2054.408069] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2054.415315] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2054.422575] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2054.429847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2054.437117] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2054.463132] Mem-Info: [ 2054.469904] active_anon:86165 inactive_anon:27052 isolated_anon:0 [ 2054.469904] active_file:2217 inactive_file:8522 isolated_file:0 [ 2054.469904] unevictable:0 dirty:83 writeback:0 unstable:0 [ 2054.469904] slab_reclaimable:14520 slab_unreclaimable:127850 [ 2054.469904] mapped:59045 shmem:27412 pagetables:6895 bounce:0 [ 2054.469904] free:1355860 free_pcp:287 free_cma:0 13:07:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2054.529802] Node 0 active_anon:344384kB inactive_anon:59440kB active_file:4812kB inactive_file:31880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:231976kB dirty:280kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2054.566597] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2054.598175] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2054.625683] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2054.631718] Node 0 DMA32 free:1433888kB min:36200kB low:45248kB high:54296kB active_anon:344312kB inactive_anon:59440kB active_file:4812kB inactive_file:31896kB unevictable:0kB writepending:304kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15584kB pagetables:27448kB bounce:0kB free_pcp:1136kB local_pcp:628kB free_cma:0kB [ 2054.662463] lowmem_reserve[]: 0 0 0 0 0 [ 2054.666491] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2054.693432] lowmem_reserve[]: 0 0 0 0 0 [ 2054.697970] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2054.727301] lowmem_reserve[]: 0 0 0 0 0 [ 2054.731309] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2054.747327] Node 0 DMA32: 1314*4kB (UME) 3353*8kB (UME) 2700*16kB (UME) 2160*32kB (UME) 4328*64kB (U) 2125*128kB (UM) 729*256kB (UM) 355*512kB (UM) 155*1024kB (U) 104*2048kB (UM) 0*4096kB = 1433488kB [ 2054.766550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2054.778373] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2054.797444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.806302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2054.815658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2054.825495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2054.834587] 35220 total pagecache pages [ 2054.839033] 0 pages in swap cache [ 2054.842474] Swap cache stats: add 0, delete 0, find 0/0 [ 2054.849573] Free swap = 0kB [ 2054.852596] Total swap = 0kB [ 2054.855619] 2097051 pages RAM [ 2054.860458] 0 pages HighMem/MovableOnly [ 2054.864429] 363849 pages reserved [ 2054.868709] 0 pages cma reserved 13:07:03 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:03 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:03 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:03 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:03 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2055.062482] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab7, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2055.111424] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2055.121929] CPU: 0 PID: 21603 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2055.129853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.139217] Call Trace: [ 2055.141814] dump_stack+0x1b2/0x281 [ 2055.145454] warn_alloc.cold+0x96/0x1cc [ 2055.149464] ? zone_watermark_ok_safe+0x220/0x220 [ 2055.154308] ? __schedule+0x893/0x1de0 [ 2055.158205] ? mark_held_locks+0xa6/0xf0 [ 2055.162270] ? fs_reclaim_release+0xd0/0x110 [ 2055.166688] __vmalloc_node_range+0x10e/0x150 [ 2055.171197] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2055.176566] vmalloc_user+0x47/0xa0 [ 2055.180204] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2055.184531] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2055.190334] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2055.194489] __vb2_queue_alloc+0x47a/0xd90 [ 2055.198839] vb2_core_create_bufs+0x279/0x5a0 [ 2055.203332] ? __vb2_queue_free+0x7a0/0x7a0 [ 2055.207660] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2055.213023] ? trace_hardirqs_on+0x10/0x10 [ 2055.217264] vb2_create_bufs+0x2e1/0x5b0 [ 2055.221348] ? vb2_thread_start+0x310/0x310 [ 2055.225696] v4l_create_bufs+0xa4/0x150 [ 2055.229672] __video_do_ioctl+0x65b/0x6a0 [ 2055.233822] ? video_ioctl2+0x30/0x30 [ 2055.237622] ? __might_fault+0x177/0x1b0 [ 2055.241703] ? video_ioctl2+0x30/0x30 [ 2055.245498] video_usercopy+0xfd/0xe70 [ 2055.249387] ? v4l_g_ctrl+0x390/0x390 [ 2055.253194] ? lock_acquire+0x170/0x3f0 [ 2055.257166] ? lock_downgrade+0x740/0x740 13:07:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2055.261412] ? trace_hardirqs_on+0x10/0x10 [ 2055.265654] ? futex_exit_release+0x220/0x220 [ 2055.270154] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2055.275269] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2055.280290] v4l2_ioctl+0x1bb/0x2f0 [ 2055.283918] ? v4l2_open+0x2f0/0x2f0 [ 2055.287637] do_vfs_ioctl+0x75a/0xff0 [ 2055.291440] ? ioctl_preallocate+0x1a0/0x1a0 [ 2055.295851] ? lock_downgrade+0x740/0x740 [ 2055.300034] ? __fget+0x225/0x360 [ 2055.303492] ? do_vfs_ioctl+0xff0/0xff0 [ 2055.307466] ? security_file_ioctl+0x83/0xb0 [ 2055.311876] SyS_ioctl+0x7f/0xb0 [ 2055.315240] ? do_vfs_ioctl+0xff0/0xff0 [ 2055.319217] do_syscall_64+0x1d5/0x640 [ 2055.323112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2055.328299] RIP: 0033:0x466459 [ 2055.331483] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2055.339200] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2055.346476] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2055.353742] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 13:07:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:04 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2055.360997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2055.368253] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:07:04 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf835}, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2055.462082] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2055.485506] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2055.519636] CPU: 1 PID: 21641 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2055.527553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.536909] Call Trace: [ 2055.539499] dump_stack+0x1b2/0x281 [ 2055.543134] warn_alloc.cold+0x96/0x1cc [ 2055.547116] ? zone_watermark_ok_safe+0x220/0x220 [ 2055.551956] ? trace_hardirqs_on+0x10/0x10 [ 2055.556189] ? deref_stack_reg+0x124/0x1a0 [ 2055.560426] ? fs_reclaim_release+0xd0/0x110 [ 2055.564845] __vmalloc_node_range+0x10e/0x150 13:07:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2055.569349] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2055.574712] vmalloc_user+0x47/0xa0 [ 2055.578341] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2055.582662] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2055.588030] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2055.592184] __vb2_queue_alloc+0x47a/0xd90 [ 2055.596431] vb2_core_create_bufs+0x279/0x5a0 [ 2055.600928] ? __vb2_queue_free+0x7a0/0x7a0 [ 2055.605253] ? futex_wait+0x42f/0x5a0 [ 2055.609059] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2055.614420] ? trace_hardirqs_on+0x10/0x10 13:07:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:07:04 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2055.618658] vb2_create_bufs+0x2e1/0x5b0 [ 2055.622732] ? vb2_thread_start+0x310/0x310 [ 2055.627060] ? futex_wait+0x42f/0x5a0 [ 2055.630867] v4l_create_bufs+0xa4/0x150 [ 2055.634844] __video_do_ioctl+0x65b/0x6a0 [ 2055.639039] ? video_ioctl2+0x30/0x30 [ 2055.642830] ? __might_fault+0x177/0x1b0 [ 2055.646891] ? video_ioctl2+0x30/0x30 [ 2055.650701] video_usercopy+0xfd/0xe70 [ 2055.654636] ? v4l_g_ctrl+0x390/0x390 [ 2055.658420] ? lock_acquire+0x170/0x3f0 [ 2055.662382] ? lock_downgrade+0x740/0x740 [ 2055.666514] ? trace_hardirqs_on+0x10/0x10 [ 2055.670767] ? futex_exit_release+0x220/0x220 [ 2055.675244] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2055.680339] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2055.685385] v4l2_ioctl+0x1bb/0x2f0 [ 2055.688999] ? v4l2_open+0x2f0/0x2f0 [ 2055.692704] do_vfs_ioctl+0x75a/0xff0 [ 2055.696485] ? ioctl_preallocate+0x1a0/0x1a0 [ 2055.700887] ? lock_downgrade+0x740/0x740 [ 2055.705021] ? __fget+0x225/0x360 [ 2055.708458] ? do_vfs_ioctl+0xff0/0xff0 [ 2055.712427] ? security_file_ioctl+0x83/0xb0 [ 2055.716864] SyS_ioctl+0x7f/0xb0 [ 2055.720226] ? do_vfs_ioctl+0xff0/0xff0 [ 2055.724196] do_syscall_64+0x1d5/0x640 [ 2055.728071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2055.733255] RIP: 0033:0x466459 [ 2055.736424] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2055.744115] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2055.751379] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2055.758642] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 13:07:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104c, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2055.765895] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2055.773167] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 [ 2055.803112] warn_alloc_show_mem: 1 callbacks suppressed [ 2055.803117] Mem-Info: [ 2055.811867] active_anon:86892 inactive_anon:27048 isolated_anon:0 [ 2055.811867] active_file:2217 inactive_file:8533 isolated_file:0 [ 2055.811867] unevictable:0 dirty:95 writeback:0 unstable:0 [ 2055.811867] slab_reclaimable:14524 slab_unreclaimable:128064 [ 2055.811867] mapped:59171 shmem:27412 pagetables:6950 bounce:0 [ 2055.811867] free:1354878 free_pcp:286 free_cma:0 [ 2055.851746] Node 0 active_anon:346532kB inactive_anon:59424kB active_file:4812kB inactive_file:31924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232116kB dirty:328kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2055.880347] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2055.909453] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2055.936231] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2055.942191] Node 0 DMA32 free:1432964kB min:36200kB low:45248kB high:54296kB active_anon:346520kB inactive_anon:59436kB active_file:4812kB inactive_file:31940kB unevictable:0kB writepending:348kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15680kB pagetables:27548kB bounce:0kB free_pcp:1396kB local_pcp:668kB free_cma:0kB [ 2055.972930] lowmem_reserve[]: 0 0 0 0 0 [ 2055.977377] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.003574] lowmem_reserve[]: 0 0 0 0 0 [ 2056.008101] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2056.038102] lowmem_reserve[]: 0 0 0 0 0 [ 2056.042138] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2056.058842] Node 0 DMA32: 1180*4kB (UME) 2819*8kB (UME) 2960*16kB (UME) 2227*32kB (UME) 4325*64kB (UM) 2128*128kB (UM) 729*256kB (U) 355*512kB (UM) 155*1024kB (U) 103*2048kB (UM) 0*4096kB = 1433128kB [ 2056.077440] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2056.088912] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2056.107862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2056.116714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2056.126396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2056.137792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2056.146466] 35230 total pagecache pages [ 2056.151372] 0 pages in swap cache [ 2056.154876] Swap cache stats: add 0, delete 0, find 0/0 [ 2056.161070] Free swap = 0kB [ 2056.164085] Total swap = 0kB [ 2056.168598] 2097051 pages RAM [ 2056.171706] 0 pages HighMem/MovableOnly [ 2056.175667] 363849 pages reserved [ 2056.180309] 0 pages cma reserved 13:07:04 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:04 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:05 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff825, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:05 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2056.271342] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2056.331558] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2056.346335] CPU: 1 PID: 21681 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2056.354245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2056.363591] Call Trace: [ 2056.366186] dump_stack+0x1b2/0x281 [ 2056.369820] warn_alloc.cold+0x96/0x1cc [ 2056.373804] ? zone_watermark_ok_safe+0x220/0x220 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) [ 2056.378653] ? trace_hardirqs_on+0x10/0x10 [ 2056.382895] ? deref_stack_reg+0x124/0x1a0 [ 2056.387139] ? fs_reclaim_release+0xd0/0x110 [ 2056.391586] __vmalloc_node_range+0x10e/0x150 [ 2056.396092] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2056.401457] vmalloc_user+0x47/0xa0 [ 2056.405085] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2056.409407] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2056.414778] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2056.418933] __vb2_queue_alloc+0x47a/0xd90 [ 2056.423196] vb2_core_create_bufs+0x279/0x5a0 [ 2056.427697] ? __vb2_queue_free+0x7a0/0x7a0 [ 2056.432027] ? futex_wait+0x42f/0x5a0 [ 2056.435949] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2056.441316] ? trace_hardirqs_on+0x10/0x10 [ 2056.445558] vb2_create_bufs+0x2e1/0x5b0 [ 2056.449622] ? vb2_thread_start+0x310/0x310 [ 2056.453946] ? futex_wait+0x42f/0x5a0 [ 2056.457754] v4l_create_bufs+0xa4/0x150 [ 2056.461730] __video_do_ioctl+0x65b/0x6a0 [ 2056.465880] ? video_ioctl2+0x30/0x30 [ 2056.469680] ? __might_fault+0x177/0x1b0 [ 2056.473744] ? video_ioctl2+0x30/0x30 [ 2056.477545] video_usercopy+0xfd/0xe70 [ 2056.481438] ? v4l_g_ctrl+0x390/0x390 [ 2056.485240] ? lock_acquire+0x170/0x3f0 [ 2056.489222] ? lock_downgrade+0x740/0x740 [ 2056.493374] ? trace_hardirqs_on+0x10/0x10 [ 2056.497615] ? futex_exit_release+0x220/0x220 [ 2056.502112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2056.507222] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2056.512243] v4l2_ioctl+0x1bb/0x2f0 [ 2056.515866] ? v4l2_open+0x2f0/0x2f0 [ 2056.519574] do_vfs_ioctl+0x75a/0xff0 [ 2056.523368] ? ioctl_preallocate+0x1a0/0x1a0 [ 2056.527824] ? lock_downgrade+0x740/0x740 [ 2056.532002] ? __fget+0x225/0x360 [ 2056.535435] ? do_vfs_ioctl+0xff0/0xff0 [ 2056.539433] ? security_file_ioctl+0x83/0xb0 [ 2056.543861] SyS_ioctl+0x7f/0xb0 [ 2056.547268] ? do_vfs_ioctl+0xff0/0xff0 [ 2056.551225] do_syscall_64+0x1d5/0x640 [ 2056.555095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2056.560262] RIP: 0033:0x466459 [ 2056.563430] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2056.571116] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 13:07:05 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:05 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:05 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2056.578375] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2056.585634] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2056.592893] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2056.600150] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 13:07:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000004c0)={0x40, 0xf34, 0xf00, 0x600, 0x5a, 0x4, 0x10, 0x1, {0x3154, 0x800, 0x1}, {0xfff, 0xa1f7, 0x1}, {0x1, 0x7, 0x1}, {0x5, 0x925}, 0x0, 0x80, 0xffffffff, 0x200, 0x1, 0x401, 0x2, 0x9, 0x21, 0x6, 0x0, 0x500196da, 0x2d, 0x4, 0x0, 0xa}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x1409, 0x20, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x810) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x7fff}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480)='nl802154\x00', r6) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00000032e0d028bc3072f0e8f1f62ef83f907e6e39ea10fa6037dec74deb3d144d97f8ec77a1fbce962e3908ff", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c881}, 0x2000c090) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x40010, r0, 0x35000) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/adsp1\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)}) 13:07:05 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) 13:07:05 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000004c0)={0x40, 0xf34, 0xf00, 0x600, 0x5a, 0x4, 0x10, 0x1, {0x3154, 0x800, 0x1}, {0xfff, 0xa1f7, 0x1}, {0x1, 0x7, 0x1}, {0x5, 0x925}, 0x0, 0x80, 0xffffffff, 0x200, 0x1, 0x401, 0x2, 0x9, 0x21, 0x6, 0x0, 0x500196da, 0x2d, 0x4, 0x0, 0xa}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x1409, 0x20, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x810) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x7fff}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480)='nl802154\x00', r6) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00000032e0d028bc3072f0e8f1f62ef83f907e6e39ea10fa6037dec74deb3d144d97f8ec77a1fbce962e3908ff", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c881}, 0x2000c090) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x40010, r0, 0x35000) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/adsp1\x00', 0x2000, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x10000000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:07:05 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x89b, @dev={0xfe, 0x80, [], 0x1d}, 0x4}, {0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x9}, 0x6, [0x7, 0x1, 0x1, 0x58, 0x9, 0xffffffff, 0x401, 0x2]}, 0x5c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x8, {{0xa, 0x4e23, 0x1573, @empty, 0x17e}}}, 0x88) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x800001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x33}) 13:07:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:07:06 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x1407, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x4004000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x345481, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) socket$caif_stream(0x25, 0x1, 0x3) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x810, r2, 0x3020) 13:07:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x12, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44881}, 0x8000) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8]}}}) [ 2057.260462] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2057.260490] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2057.260515] CPU: 1 PID: 21772 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 13:07:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2057.260521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2057.260526] Call Trace: [ 2057.260543] dump_stack+0x1b2/0x281 [ 2057.260560] warn_alloc.cold+0x96/0x1cc [ 2057.260573] ? zone_watermark_ok_safe+0x220/0x220 [ 2057.260585] ? trace_hardirqs_on+0x10/0x10 [ 2057.260597] ? deref_stack_reg+0x124/0x1a0 [ 2057.260611] ? fs_reclaim_release+0xd0/0x110 [ 2057.260627] __vmalloc_node_range+0x10e/0x150 13:07:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:06 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2057.260641] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2057.260648] vmalloc_user+0x47/0xa0 [ 2057.260660] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2057.260671] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2057.260680] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2057.260692] __vb2_queue_alloc+0x47a/0xd90 [ 2057.260713] vb2_core_create_bufs+0x279/0x5a0 [ 2057.260725] ? __vb2_queue_free+0x7a0/0x7a0 [ 2057.260740] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2057.260759] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb 13:07:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) [ 2057.260771] ? trace_hardirqs_on+0x10/0x10 [ 2057.260785] vb2_create_bufs+0x2e1/0x5b0 [ 2057.260798] ? vb2_thread_start+0x310/0x310 [ 2057.260809] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2057.260823] v4l_create_bufs+0xa4/0x150 [ 2057.260834] __video_do_ioctl+0x65b/0x6a0 [ 2057.260848] ? video_ioctl2+0x30/0x30 [ 2057.260865] ? __might_fault+0x177/0x1b0 [ 2057.260876] ? video_ioctl2+0x30/0x30 [ 2057.260886] video_usercopy+0xfd/0xe70 [ 2057.260902] ? v4l_g_ctrl+0x390/0x390 [ 2057.260910] ? lock_acquire+0x170/0x3f0 [ 2057.260923] ? trace_hardirqs_on+0x10/0x10 [ 2057.260937] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2057.260948] v4l2_ioctl+0x1bb/0x2f0 [ 2057.260957] ? v4l2_open+0x2f0/0x2f0 [ 2057.260968] do_vfs_ioctl+0x75a/0xff0 [ 2057.260979] ? ioctl_preallocate+0x1a0/0x1a0 [ 2057.260988] ? lock_downgrade+0x740/0x740 [ 2057.261003] ? __fget+0x225/0x360 [ 2057.261012] ? do_vfs_ioctl+0xff0/0xff0 [ 2057.261023] ? security_file_ioctl+0x83/0xb0 [ 2057.261033] SyS_ioctl+0x7f/0xb0 [ 2057.261041] ? do_vfs_ioctl+0xff0/0xff0 [ 2057.261052] do_syscall_64+0x1d5/0x640 [ 2057.261068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2057.261077] RIP: 0033:0x466459 [ 2057.261082] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2057.261094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2057.261100] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2057.261107] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2057.261113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2057.261120] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 [ 2057.261162] warn_alloc_show_mem: 1 callbacks suppressed [ 2057.261166] Mem-Info: [ 2057.261192] active_anon:86190 inactive_anon:27052 isolated_anon:0 [ 2057.261192] active_file:2217 inactive_file:8544 isolated_file:0 [ 2057.261192] unevictable:0 dirty:122 writeback:0 unstable:0 [ 2057.261192] slab_reclaimable:14509 slab_unreclaimable:127811 [ 2057.261192] mapped:59126 shmem:27412 pagetables:6878 bounce:0 [ 2057.261192] free:1342672 free_pcp:227 free_cma:0 [ 2057.261215] Node 0 active_anon:344368kB inactive_anon:59440kB active_file:4812kB inactive_file:31968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232136kB dirty:436kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.261233] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2057.261237] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.261261] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2057.261283] Node 0 DMA32 free:1381324kB min:36200kB low:45248kB high:54296kB active_anon:344368kB inactive_anon:59440kB active_file:4812kB inactive_file:31968kB unevictable:0kB writepending:436kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15552kB pagetables:27512kB bounce:0kB free_pcp:908kB local_pcp:312kB free_cma:0kB [ 2057.261305] lowmem_reserve[]: 0 0 0 0 0 [ 2057.261325] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.261345] lowmem_reserve[]: 0 0 0 0 0 [ 2057.261364] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2057.261386] lowmem_reserve[]: 0 0 0 0 0 [ 2057.261406] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2057.261487] Node 0 DMA32: 897*4kB (UME) 234*8kB (UME) 803*16kB (UME) 2271*32kB (UME) 4314*64kB (U) 2130*128kB (UM) 733*256kB (U) 356*512kB (UM) 155*1024kB (U) 104*2048kB (UM) 0*4096kB = 1381348kB [ 2057.261567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2057.261616] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2057.261703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x89b, @dev={0xfe, 0x80, [], 0x1d}, 0x4}, {0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x9}, 0x6, [0x7, 0x1, 0x1, 0x58, 0x9, 0xffffffff, 0x401, 0x2]}, 0x5c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x8, {{0xa, 0x4e23, 0x1573, @empty, 0x17e}}}, 0x88) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x800001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x33}) 13:07:06 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x200}) 13:07:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:06 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2057.261710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.261717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2057.261724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2057.261728] 35235 total pagecache pages [ 2057.261739] 0 pages in swap cache [ 2057.261753] Swap cache stats: add 0, delete 0, find 0/0 [ 2057.261757] Free swap = 0kB [ 2057.261761] Total swap = 0kB [ 2057.261767] 2097051 pages RAM [ 2057.261771] 0 pages HighMem/MovableOnly [ 2057.261774] 363849 pages reserved [ 2057.261778] 0 pages cma reserved 13:07:07 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x87009501918da0af, 0x12, r2, 0xc3000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000e80)={@mcast2, 0x0}, &(0x7f0000000ec0)=0x14) sendmsg$inet6(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)="eb5e7eb26b36435099ec", 0xa}, {&(0x7f0000000c00)="ea899aebdae55d3d6486fdc5a959f8a1eefa8879e9a51dbeafe19f77187335fc1b61c0c06ac1288ef24c8b67fb2b5caefc0be4b0791a1a0d82e1ac8080805b75491444481fa73cbdfc187ce4303f5bfc37b6d50ffb460b4d7b7f4e8304ca1a679912fff4af48c3214ead0daa242f9b5cfcecafa56821fd87c4f5f313510f5a551f9f301b5c0bad07c749bbb035dbf7348ac376696d9a8bf64bda84faa70dce5fb16a566e67c68367e8b6ab83db8a8ccd46e634eb60dee18d3e4256c921bb6e047c291410008c581cf3eabd5182928960e483659a944ec43bb598be8f520b4425e8568e692b2811ef0c", 0xe9}, {&(0x7f0000000d00)="d81f34dbcc3d9aa2651c6f31cac5783980c798423e505d4c5ceb92c75944a215", 0x20}, {&(0x7f0000000d40)="d55b63acfba044b5dffc40c448cf", 0xe}], 0x4, &(0x7f0000000f00)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @remote}}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x0, 0x15, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0xda6d, [0x0]}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @hao={0xc9, 0x10, @local}, @generic={0x2e, 0x6c, "332b83b85b0f5052375577cafa72236816f74baff55a12a72c2e6288fcd77a21c8023a4cf72ce73c7050ad0cc41d2b0749c00778d39f40c4a79021e2aba449556de46c43c0f888196e8291901e6fc60d039ca40399a9b755468beb9ad09ef22c1069b4bb8d25fc44376db3d1"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x2f, 0x3, [], [@enc_lim={0x4, 0x1, 0x6}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x3f}}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x1b0}, 0x4080) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0xe8, 0x0, 0xffffffff, 0xe8, 0x2d0, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x1, [0x5, 0x0, 0x0, 0x5, 0x4], 0x0, 0x3}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x43}, @icmp_id=0x65, @port=0x4e23}}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'wg0\x00', 'wlan1\x00', {0xff}, {}, 0x73}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x80, 0x80, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @port=0x4e21, @port=0x4e24}}}}, {{@ip={@rand_addr=0x64010101, @broadcast, 0xffffffff, 0xff000000, 'wlan0\x00', 'vxcan1\x00', {0xff}, {}, 0x89, 0x4, 0x1}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x218, 0x802, 0x0, 0x1}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}, {0x0, 0x1, 0x7, 0x100, 0x20, {0xff}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @loopback, @multicast2, @gre_key=0x40, @port=0x4e23}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x180, 0x40, 0x1}}, @common=@unspec=@mark={{0x30, 'mark\x00'}, {0x800, 0x800}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @gre_key=0x6, @icmp_id=0x68}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x995b, 0x46, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@noop, @cipso={0x86, 0x39, 0x0, [{0x5, 0xe, "e1d2ae384b825f04e9aee385"}, {0x1, 0x3, 'T'}, {0x6, 0x5, "29f659"}, {0x6, 0x5, "f6a205"}, {0x7, 0x9, "897346cf7792bb"}, {0x0, 0xf, "f0defe7fa71bc0f865afb9cf94"}]}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x7, [{@multicast2, 0x400}, {@remote}]}, @rr={0x7, 0x7, 0xba, [@empty]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000b00)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b80)={@empty, 0x0}, &(0x7f0000000bc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002280)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000002380)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x25, &(0x7f0000002400)={@remote, 0x0}, &(0x7f0000002440)=0x14) sendmsg$nl_route_sched(r5, &(0x7f000000aec0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20010080}, 0xc, &(0x7f000000ae80)={&(0x7f0000002480)=@deltfilter={0x89cc, 0x2d, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0x7}, {0x9, 0x4}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x4378, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_MATCHALL_ACT={0x3a7c, 0x2, [@m_mirred={0x128, 0x10, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x10000000, 0x4, 0x200}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xa522, 0x3, 0x7, 0x100}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xbd, 0x10000000, 0x6, 0x101}, 0x2}}]}, {0x99, 0x6, "5156b1e7b4cf01eaac8ff7d765cc61913372c59634dfd7ce1d91a7555c41f86f4f593658251451465eff3230b55b39a486546ca061e332832566636018d56842000ee6161f5b02a075b9714f535c6d23f36eda10b59aff72c4177f84f22bf00f1e40c2b029d78ada0c20fc1d17fdaccf4be806d8c546530970fac9d72a956740046306db44be0d17652e48ea6ee878b13e234efb36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x12c, 0x20, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x0, 0x7, 0x8}, 0xf73c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x5, 0xffffffffffffffff, 0xfffffffb, 0x1}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x8, 0x1000, 0x7}, 0x7b}}]}, {0xa8, 0x6, "eb38b700a8b01a648f675bb70523e28b0872475bb01817d4197e66d6d2f50b79a1147f0a6f21e4f6d9440c04c4ae2e942cd928397efe2a9b68f0cb2a7fdfd142cf3470328a39d3f7d45f314132b55d8b6062cde834ace7ed4fde43c90f071fd524cb6da48e2c964bb8db3cbf523aa1ecc2f66c33ef8c4d2a862d5296d749b87f0a4797383a607d13f20068cf324dbbcf1ccbec6b7c1f1252a1e61959e999fd46c2bd848c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x1078, 0x12, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x1f, 0xffffffffefffffff, 0x10000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffff}]}, {0x1004, 0x6, "4cedcfb2dd016a86827380db20c9b11f8ea78aaf4d253d335f6371e8119730e6b73a88958f19717545a62927dd881724d953baae8798ec2e95ae0fa5960e10b6654644a4274c9d4a44d11ac974a98f288859e9633808eeff2064ec494b689f67b3f2434265655b11e1e231142f6586c7218a679a144745a562b7a0322c34991b5b78d15f4db0b837291b24c11fe1cab776e78f9c3bb5619957d8cd2f6a271793676cfa92105fc77aed54e186a3ad9e52b260ec8f550826c7b3c0011fb843808e44255b6575d1bd9035de61960e44c554c9144614f6ac079265bf07739de0f795c05a8357e2d4ff9abc818fa8f6b2499f2966dee09a8eb1bd9bb8770cac3812b06f1195e520229cf56de4ce6d6a477046855b00cf8212cbf4cc6122937f0c02691f3657a514dd8c99ea64875474190a77426752a06aa998d74b179b35a17f9c972f49759fa460ddf832595c3d39c3e838efe3456f40903d6875c4b0eb0c44ddff5b1293bd5b0d672040531a4ad4abca6c4fe79f2a30b4449edaf0ea50e95330f36bafb6fee6cd228265b4f1411eef2a054f4a041e89d3dd0acd0065dc412a2961efb0480db02eb6c9688a2588ff86f303fee38b0de4b146e1d4d6eedecc666a22de08b626bd953c957d7704bd07957ba9646de3193b072ad241522410918fad9aaa498b62bccac3813cb5fa4259a49e13f8d60fe5104dcafbce71c86375e8cd47ae52aab7390a003dc1b383831cb9700d6653f6521e75ab09bf63a00eea70f079eda75f623c579cd8999df433faf79c379e1004bfebca5db2fe312b0f5dc2be5ef2c5edad85f2e2571be0020530af7208c9216d668585e6b1fb0f84d7cd60233426bf952370aa16bfdcf69fd1b5be636ba6e6c2e1e29840c784b23c2be2059281a6d87d2f44a12a89450417c8d801780a47265d3d97d2fbb731755a87502ea58f4b94ef2c6b261e22dce7cada85d052b1bbd91480159e2dd62d55d370f09eeea7f64226f0733fc327c405ea1d44522e8cad46a3ca6d023a9f4c1daa31f1a0b1d72136cc30caf43f53ee651344f25b46238139e5c6181e641b590ae5646a7038057ff3681f45d7c8b84fb0f76c10143a7fa79ae1ffbf60d2b4fec3d23bc69c48b432c1b86c23db06e0e721f9af53afc4ba8d33bc560f43ea0197a1109114f18d5c922267e693ea641a348eda22c1a662e7c4d1a5873c36b07e0f92edaf3d4360e2195f078e89227a5396ca7cef1e3ea6a990268f17353c9ee321fe8a1fddb72782a2fe8cd6bf6e322b2b0b06b044ec7cd5e9f979e7d8dc7975a1e139b9477599a754bcc5029e74ca2e118eb3934b3867957391032fbca98f94e68dd3d71e63cfaec44e966f8e7dbf6e2a47a0a81cbb0b3e8f956d57a5b7de9e17ae56d4717546993c634589978f85a0543e5fc8201ca5012226545503a8ff0c545342546e1bbc36d4ca4795f4cee8cda57f92e5eb5d7337e90b004dd18bb99c8f3e8fc4d27b3719875ec09e94fcf64f2c0280d9d14145ac2115dbf4734eae47320c318b3e00496e0318957921d2c426b791e46a36b2058533a10777335ee5338bfcf1500a8fed103a6e88df923c74713193150969ad50c63510b12504342c3ab737d9665f0fb79351ef89cb6fd11438801532841779efc693a6bd77a11c21305c571a6373024a6e9bd6a6fedabb349456a4e66a68ba7d62c8c1224b888526c63d966580f46f6d8d5408b474dad3696b8b865e899581cf7694862f7808ce444320667382aeaf3db2170cc4b2f9cf4124a22f772fd6e97f8dc099a1dc5c9347b615aec6b0f7c5acf1951152c07c22cadcf41f2dc824c1cc770fe94b5c3422a5152379f08383da05697a10fc738d95b37da27a5bd3170007e4602a282da1cf9b426dd6337179831967e2ee46a5e9b2a29cad465023e68524cba8e9dfae9785ee1e319df64eda6eb885799cc14c4ffc1635e383690164450e95aa1b6e484064f1723403cfdba5b1618388ee7cd5010b14135cb0e62c1624c944c60d46980f5ad3acd991a74676a4d681e8fa8c5161063655bf377adc0ad5ea0f3f405ee2348a394327445423aec99d97c1d050ab6e02d9bd90b98583be9b19fdb4e420e9b178b68a6a15a63b40bd047174215deee73bfa704f2717b76f2a8426ab90f49c8f7245e306dce8bea46f90d349869c405126c15944c84211e95e5a1f8299410f6a0bb6b169c8f64c2bf46f90c6a659d9d9f390cf5dc3220c3f8f1894fee867a22b6c33cb2cf84ecd485d9a4348a5b4c0bd266fef80cc9f548e1f843b8d37444a4de9bff6f0f09bbe3ea3bbf995ef7ed37c7f52939dc482e2ac4ea6a29079e993d80998a57372483b7d9b5f96f46bba034436b31e75b4dca01deb5e839964e3f023af5347208d3b252d5f93cd5d5c86676bd3808b3ebdfbddf97b2a0923f072c0af4739c252b087856bf8e6257dc820f01fa8fc6ad63d4dbed0ff90d2a773f654e09a3d90f46920e493762e6aed3db090bbc5b037a09c99bdb52f8498183298ff0b096c57c86a8b8bbab9991ffd528ecf57c3079c88ec47517922d259956cd124c678edfeefa949368056ebaf28360d1be2d3774237c7518ccefa6b0417f51f61a81e37b036d046d0bc7c4230a1c39a61716d90d6faa32725b6c8ea5bddea82105305dd859d467c96193a101a4de0f8c06c18c5b3161eb8c0800b1bcbe2e04cb3f62295760d8d4706bcb1b720b28ded76298b863a1fcf465f3c857fbfc01c985bd2e07921f4a826562436524171e009cca2c54c008e71b122aa522b3bb63c0b1eec59f2b128350cd64cb101a3a5e53dc2bcc57d1d46bbb2ebca7a8d9040ec106054101b306ea519f370328318c12448f75ff4ae9941db9637095cbaf57733d6bfea8f728ac848e20f628bb16c92a583fa05425e2b8e42479561a5c9d9605b35c35991072ee0dd10f51b16b9942ae5183f279f357db8742d08d19954a0934820be94985ee157dd039149d36ce02575e4079da28e86d84e88b6fb40a2eec0956029d3b75096b3e362cc94479b34e1792ad336155e224ddf5866f5745993b38ef062cc23c92e7c0d6ae3b4ef9ce1713cb926a686f2f33a2f9a8795d545b6081a2f19e25d56b2336e9c8ebcd6c8c86474dd568242cffaee94fdb575a871e078b62a57b662bc3df0292ff0c5664cc02b3410879e3fed8f75aa17b824f254921d8e7916cb556bf1908ef72f87291081fcfaef5497082f90e54b4636deceb61d7ca5146ca7b23cce277d00c3979c291852fe9a41936b1ab148c426db8b8c95d45d056632423f04b1db15c7b38d47ca46a1814c546c56fbdd6c2e9be1f4abe96107203af8da642f2ae7d959c07e000442dd43d9db8445cfff7df09bb8c1cd6b8412be74f01009f957f163da42709460a0404f64b8ecda54d983fa35dbef67a130a0b39df04c24134ecc9716d9bde12381c9c1aad235436501f5cd9938de20f4b4d7919e6245de3729c481ff5603d805e67aa27ca086733351555a935356a732a6b2e784315b5fc76d416a2b16ef86c3bec1717697707b16d35ba8e9affce0312ea178e706aa34b6fa1dbdb0d46adc13071f0a05a2a151908ac1d6ed33b407e9d19e9556c235102924390ca16a6d310f27fd8672b732f4b3ca3fd89fab16c2d8df555d1d879b851d42e6559b738d8c2f3aba9bc722f8bf5d4a6d8e01922d1bd80b33b2e2a06587866a8385220b1478c3ab85501899ec88fd71057d10621d39f57c76b403c46bf7d098476000fd44723afd2a95b87a326f34879938f83be8396ec0fb7512be49f30935b694f050f2a8fbcb16b8f3c49082a1ccc3f99fe7731181b7cae9803f6b9425bcdff85fe30c4a001929bc983b04d3640f774c37fa97a6c6c67cdacc4f58d709e735b727289af2db1320ddbbbb46ba81154d99d1208a4819774db1d343ba3aa992e0c68c9e9f99c1a36b5b9f8e8d9c27f029b74446a9af921b224e24e7fff803c3f85d64a90a7dcf4d457cebd804040b17b836c11713df1288de27de2819ef31a4f36fc965116283031465e5bcc7881593edfd0dbf65e11e4dc933b1937863b1edd964be89bb3e9cd405220779a994176cb5cabc01daca9540509abdc04c295625ee0641a7ff4751487b11f5973085a8185d6d3b8b8ada47980390c8faba3620109d61eb8583b2800f4147ca7e1445d175645275e5fbdb0a03ec50b0cd29c0ac89a51cba1de777545ffba4c504843b93a3ad7ab120b177cf12d89eaca944fd2a5672528fa78ff7460716e193b92aadb08de16a93168f3b227cc7becd07df5a084dac63728e02aecae339f8840987203b9f607afe6abe944d993409bde46cc4c5eb71290e481faf960cbe9eefaa5a334a591e8cb1bb513c248235caae4738cc724c82e44db19dd79ed3f954bf4fa32fc28c4cdd1fc5454291247cfc6c8ff07d8232519ed2779c79e83d58ced553e508ed72c3c6987390a40f3b695ce43c8ad3b8507856352a32e9f292c7c351efb400f396fd8eb15769d726a6a59898901c4dc88e6df8e0c917b9150133cab3c0ba17818d9f9ff319a15bbdb3c223e82f069baf55fb865d895dbf87905404ea9d552731b207b57fd857ddf3ca13fe6830fc55d3da03ad78f692ec74faa89018de187885c48e6a8d77e0fdb8427c289fdcad34e26621d2bb85bf8a073935ba835e898127cb474c4be59f836594cdb938ef9dacdd1b98bf5e0ab5bfae7755cd44c2b7d1d33d38a824a5efe57613e78bee4781641a7f1045b44bad2c50445ff086f501bae1c0e55305d7fab74eec85cd9879894dc2a352d97cbf5e07e5fc801b8bf92b176eace996e57c272f950a8b7cb6d54be8cbe6d02870a2f160f255b85534e94195eb70873a6e48094572d0baa6eb6bdfe5a4e705c7f3c3b9ecdb3b0c8a54601931e1b68c7bb846aa3607de34e55e2b236b045bf25d29af573d2fc3d6c99d92c31e086420b7873753f200d72a11c437c6ac4c20b8495d7e1fa8266edb099598b6a46d31483f3902d0da84788a708bd215388923267af01129600dfa8a46a7b4227faa47b897b7b761c98ef38ae688ac1e360bcce8026a335df4e3603892bebd2a304f8b9649df0f8285d28615017688bfe228458fc750b39d35ec8cf47a4419f531f2fceaa35c4387d0a917032df765500a088e2458e10786c49a87e409d61f9ac5ec221d51433b53aca11a053dfff7bdf103dfd6f8de042bbe3c53a97a2611089642ea7381e3c1df15e2281f669c6db5b3e16d55d4eb0b20a8196b2479f58f9ba172f1c4258c39064a115737781a45de9c6332545ef355bf93735fad0a38433311ddc8218ad1ba546779991fba0527657c6e80bb55e1ba214585c89a7c017937ba424aae6aa1c655464fcb07749ab2e67e32db2a290851bce5dbb8433d3146ea97c628c21993916ce614cf1e7276ae50d1d4a5cd16201577e859e2f87484ddd450e8128268dac11150bef75fa1c3ba12fe0b53380e4072fbf77f7a172ee08e0145a7b6b01d3f31b1557869b59457f14dd89813cea5291bce8e09ded2868b81e777d650db6f3e818beb5967411df974cb78e084e17b5cf9fa0123f6e849ffb7c9912e3c88fa9dcdeaa2d223de97c2a8762215523027cc90ee305a4118a55b9e279774c7c15aace5c36e949e38bcf37edc5d44c5ca41e4ea40eb469172c272455d4c494dc93ada1a84559effdb64df842cfff8adf0922dc21a47bc31ee54a346bd50edf6bb299eebff93153f6e86e7e05fdba14811a22d5ab330815b565cd5b3e3c835bf56e26fb387c3c40f9da16855b1eef2b986ecc9ebcf9baaea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x134c, 0x5, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x1234, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa3, 0x6, {0x3, 'nat\x00', 0x5, 0x1, "70f81f51ab855d8ae55c8193c45a33aab7f244be5245a39b756e4b92faffda23a51b0376cec18bdf7fcc8739f85ed2bf9af1d7be03d8ae3a03d72fc69e23b0b7da681e00f68c6a536197475d6e100baca92f26981fa36132aa5df679a80fdc8d44c88062170e7c3797e1064ccf72ba3037602c1f45a83e06d9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x2, 'mangle\x00', 0x3f, 0x0, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x100, 0x6, {0x5, 'nat\x00', 0x7f, 0x1ff, "5c106e0f733420226e2bfd156430c52ca05ce26ea8db4ec427978f7f882b952e537d3969a585f0b8eed38aeb73ae7cf0fa7e58674c8686c3055fe049d4a8dbea7fce7d7828b089b504769f48cfed3241ba5390ac3294eed456d08292a2a01f10e546781ca7698a6ea8f85980209f1a166ad5580e5321b1fc999c470109265afd071442b4bcddd0b710c20623ff7e0a14e866259274569fb354b7288fa74531c483e9f9c9b1f2ecc08ced984883da6e0c16cd7482df78125d2128145d7f1762a0d3959a2c00ddb1298d7d8a8722f5927c31534ac544d5"}}]}, {0xf4, 0x6, "91da2adbb6315845a6c0cdfb24aafea051d313cc2a4f2717250f9162d5b03854648332bda0593638ee8b89f70a4f6d8c41bea07aaf20a08a8b7a7317edd666352f4da2476133b5b87c3f983e4ea1b8858107ace10fab2b60455b8d6401a445b60eb647eeac185a2e096736a95c3a00d05bc54c18949ffb4d9bcf63caf5e653cb9b2fad2ccd41d8442cf009ad9f5dd9e20e8625079d293a346cbc2c29261f915bc050be5d7a4299828279afa959a9e3a9c5278c69d23f9b76eb3407e42fe04d66ef3be8e1b2ee89b5ef21b88527d3c2e110df29b0e83c480c8cf720a68d51a76696bda635577d2358efd194e9b965ac3f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x74, 0x17, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2afcd0f1}]}, {0x44, 0x6, "9afdadfaef2002680bcca3fb81d2bd04e797d84b1f6f47c3c88b317ef1ef5ffbd4b99794a02ccac3cf86e5a1bb4678de217f724a820cc65deeaceab125437a64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xc4, 0xd, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x7c, 0x6, "8de483778946f13a17ca73e1f1f625a2cd8fa5d37b34ef7a27adf0c17d0092fe43aa9fd554886edceac38c063c7b565fbf5bb420c2c22f3d3fea6bf98661d1ec9249c40490703bff7b7ef2e210ecb3e0c79080f46a86c49d765b4ec163497e1f1aee6e2a9ebb25c1576e386408de613e2781af6f2d751463"}, {0xc}, {0xc}}}, @m_nat={0x268, 0x12, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x7, 0x9, 0x7}, @multicast2, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x4, 0x1, 0x4}, @rand_addr=0x64010100, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x5, 0x1, 0xf4, 0x2c4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x675, 0x6, 0x2, 0x8001, 0x7}, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x2, 0x1, 0x1, 0x6}, @remote, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x10000000, 0x8000, 0xf8}, @loopback, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x6, 0x3ffc, 0x9d}, @multicast2, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x65f0ad7f, 0x2, 0x7, 0xaa3}, @private=0xa010100, @local}}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x10c0, 0x14, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x9, 0x8, 0x4, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x0, 0x3, 0x6, 0x6}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x1, 0x80000001, 0x401}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x338d, 0x81, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x80, 0x4, 0x7, 0xb0}, 0x9f34}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_MATCHALL_ACT={0x8c0, 0x2, [@m_police={0x38, 0x17, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x1cc, 0x1f, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xe7, 0x0, 0xe078, 0x10000}, 0x37d3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6b, 0x2, 0x1, 0xb91, 0x5a}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7f, 0x8, 0x7, 0x851d}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3e0a, 0x5, 0x0, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x1, 0x5, 0x1}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x5, 0x7fffffff, 0x401}, 0x58}}]}, {0xf1, 0x6, "04bcad1bd6f1abca3b5371c27778d12e2babb1e0f238494c031eedf1455249fc02644a854f0c3d3c735aad915fbb51c20b0b248f6689fa55adaa68eec5f85f426a4afa8c17a4f5522247389ada5439369d127ecfc0a9ec3ad607bfc6cf4ec76c7bac8fd8b7f9461c9a297f37bf001dd4ab232052829a6220a4c3144168838d2f1efa4949fee2d5a6a8b377e5e3154821df53184c3dd77ce03a73e644d174b28384d6aed013317a1533050005a55fef80fbbf45fdd08a9ce026d891dab9c34810b40d1979e1d08a01d7a05cd8a7e2a0aea2e677dcfcb8a05eb7a5709d87b63f4a2916751a670f54182522b14da7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x174, 0x6, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xb5, 0x5, 0x424, 0xbb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x9, 0x0, 0x4, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0x4, 0xfffffffa, 0x6}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x3, 0x9, 0x7}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfc, 0x1, 0x77, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x20, 0x1, 0x9, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff80, 0x8, 0x1, 0x87, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7823, 0x9, 0x20000002, 0x7, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5103, 0xfffffff7, 0x8, 0x1ff}, 0x1}}]}, {0x25, 0x6, "20d6b0c36b69efda803bb7370eb67371e721c3656863e6c7ed7f812bac430b6964"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xa4, 0x18, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffe1, 0x8, 0x8, 0x7dfcd246, 0xfff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf118a9ce, 0x9, 0x10000000, 0x5c6, 0x10000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x0, 0x0, 0x6, 0x80}, 0x2}}]}, {0x17, 0x6, "9728e3414d25159d5cb7db6a1a9cfc9ec86194"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xc4, 0xa, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1113, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x80000000, 0x8, 0x8, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21c4, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a6f, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xb80, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbc1}}]}, {0x44, 0x6, "62f8e1f4feef01004fe74797bfc37d8c68a185ab70516203c7f858c2124889afe323b15302f7ac18e64c6eeb426f981c30aa81baa0f55fe9794b638070bb8473"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xf8, 0x11, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xa9, 0x6, "70d05455965e029a95fc2177cb5e6fa6469b4de859ebf7ad39ae54b7d41c46fc7ab29cd20132bbeb8e562d154e7632b5917b00b1064318f5b064da456150fc037ad41a0639a96f9f597100cff2914bee63065a9ce767a7b447bc92fbc000dc222358111c53b840e31e3b4502d1e4b01c5be0022225d830c8e41071292808c3f99dd6ff4ba0ab198af72070ef8ddd1caebc7a65bf1e1c3b0fcaf40ffe5bac013ca26cd20a7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x178, 0xe, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2375, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf2c, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x6, 0x223, 0x6c}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x438, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x0, 0x7fff, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2484, 0x4}}]}, {0xec, 0x6, "5d4aa09acdfc79c65e962c204dcfba20b44b5a459eeb79b7e588ad63ef75b6761a4ec9474f7d77706496a0a44c9f9a5214a4cf00e565719a25e36b93228ff15497f4bb5d0b74f688e2d484c1ec0e870afa013df975a559cf9bd6b661e3debfbe420a60991f5ac944ca357de58956b6a73e762f2ad95b60f6dc96fdda40be909b4c77e16b36274a4d5c37965f6cdb6b7489a1ddf4e7a470da1e4805251de56e27c50abec8f3529ef549415006bd047b8092da66aa3c234d1e97def9d8b872ab591ac1e64263cb044606605d10a5134863e6734fc3285f53cf2c40de62c49242c6ba5cf17f3939be8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x16c, 0x40, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfff, 0x4, 0xffffffffffffffff, 0x9, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x8, 0xffffffffffffffff, 0x7, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x40}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3f}]}, {0xdd, 0x6, "a30d343958ed4df2375e3cab35c3294738baaddc707a4dd6a8cd6342a2c8751d0248b5737b7aed734618f1ba5b422d35fb45267858b9b47936846d8503f46c6fb1c369616b2ad0a323dc8c6ed4381eced361a90f20f9309cfd9befff5d945b45245a83118e04259ec70f77333265e545730cc9009dd1b9bdcc3ee67dca67e16100c4dac21e3ded23258fe401a3621426a1df1832c52974376a95a3680aad3b54ffd85b4a2551f12f9a7d7b4bd1034157316ba9096abffde8cb8b98f253e4a9797e49d291d36ad7267a6598607b14485edb6e75fe6f92995aa7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x93, 0x4}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x45d8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x89}, @TCA_FW_MASK={0x8, 0x5, 0x3f}, @TCA_FW_MASK={0x8, 0x5, 0x7f}, @TCA_FW_ACT={0x395c, 0x4, [@m_bpf={0xa4, 0xc, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x800, 0xfffffffa, 0xffffffffffffffff, 0xc4}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x5a, 0x6, "39bad04df34b27a83f100f06fe2ec963e0874a643eb6a4895f18a9ef5e1b4fe7b8d2aabbff53935fda9da408141bf75022bcc40b88c005d70a16778aecffc3d35f9e4eabeef9b2b71764f1e0255dbf2f053cf888eadd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x114c, 0xe, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0xffffffff, 0x6, 0x7fff}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x5, 0x2, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0xffffffffffffffff, 0x7b4, 0x1}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x101, 0x6, 0xead, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0x10001, 0xffffffffffffffff, 0x0, 0x400}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x8, 0x8, 0x694}, 0xf77}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28, 0x7, 0x6, 0x2, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x47e, 0x800, 0x2, 0x9, 0x8000}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe7c7, 0x2, 0x8, 0x5, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3f, 0x1, 0x80, 0xfffffffa}, 0x8}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x12ec, 0xa, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x1210, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x10000000, 0x7, 0x8001, 0x7c6, {0x80, 0x2, 0x0, 0xab4b, 0x2, 0x6}, {0x4b, 0x2, 0x0, 0x9, 0x9, 0x8}, 0xff, 0x1, 0xb8d3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x7fff, 0x5, 0xffff, 0x151, 0x1, 0x5, 0x7fff, 0x3f, 0x40, 0x9, 0x5a9, 0x6fcb, 0x7, 0x2e0d85bc, 0xc3, 0x25d3bb35, 0x4, 0x7, 0x1, 0x0, 0x7fff, 0x7fffffff, 0x7fffffff, 0x4, 0x1, 0x1, 0x5, 0x7fffffff, 0x8, 0xfd, 0x4, 0x0, 0x400, 0xc3, 0x0, 0x5, 0xffffffff, 0x4, 0xfffffffa, 0x8000, 0x0, 0x3, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x5, 0x80000001, 0x2b3, 0x9, 0x100, 0x3, 0x1, 0x40, 0xdf, 0x9, 0x7fffffff, 0x7f, 0x40000000, 0x2, 0xffffff7f, 0x20, 0x6, 0x0, 0x679, 0x6, 0x81, 0x6, 0x3, 0x6, 0x8000, 0x663, 0x5, 0x8, 0x0, 0x2, 0x971a, 0x52b1, 0x1, 0x4, 0xffffffe1, 0x3ff, 0x3, 0x3, 0x400, 0x3, 0x80, 0x10000, 0x200, 0x53, 0x400, 0x6, 0x3, 0x7fff, 0x400, 0x9, 0x9973, 0x8, 0x2, 0x10001, 0x2, 0x9, 0x3dcfdf7d, 0x3, 0x5, 0x101, 0x4, 0x65bc, 0x5, 0x7, 0x8, 0x7f, 0x7, 0x200, 0x1ff, 0x879, 0x3, 0x1ff, 0x1c000000, 0x7d2d, 0x6, 0x2a, 0x80000001, 0x7, 0x16c7, 0x855, 0x81, 0x3, 0x2, 0x10000, 0x8, 0x81, 0x7f, 0x6, 0x5, 0x2, 0x0, 0x7, 0x0, 0x10000, 0x8, 0x1c000, 0x2, 0x1, 0x5, 0x6, 0x80000001, 0x0, 0x3ff, 0x81, 0x1, 0x0, 0x20, 0xf8d, 0x9, 0x1000, 0x400, 0xfff, 0x200, 0x1, 0x38000, 0x20a90281, 0x8de, 0x7, 0x1, 0x1, 0x8001, 0x0, 0xf4f, 0x8, 0x5, 0x6a6, 0x7fffffff, 0x9, 0xffffd983, 0xe28, 0x0, 0x1, 0x2, 0x4bdc, 0x8000, 0x7, 0x7, 0x925, 0x89c, 0x3, 0x9, 0x1, 0x1, 0x9, 0x1e3e, 0x3, 0x3, 0x0, 0x5, 0x357, 0x4, 0x7fff, 0x5, 0x80000000, 0x8001, 0x80000001, 0x8000, 0x58, 0x9, 0x7, 0x7, 0x0, 0x9, 0x4, 0x7, 0x100, 0x7, 0x8001, 0x101, 0x3f0, 0x3, 0x80, 0x4, 0x100, 0x2, 0x1f, 0x8001, 0x0, 0x311c7d96, 0x3ff, 0x5, 0x1000, 0x1, 0x1, 0xcf4, 0x4, 0x4, 0xffffffff, 0x1, 0x100, 0xffff, 0xb2e, 0x7, 0xfffffff9, 0x65a3cb0f, 0x3ff, 0x8, 0x3fd, 0x53, 0x759, 0x82, 0x6, 0x3, 0x1, 0x7fff, 0xfffffff7, 0xe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x8001, 0x7, 0x7ff, 0x20, 0x80, 0x6, 0x1, 0x8, 0x5, 0x6, 0x401, 0x1, 0x4, 0x577, 0x0, 0x4, 0x4, 0x200, 0x0, 0x8, 0x7ff, 0x0, 0x4, 0x401, 0x7, 0xde0d, 0x9, 0x7, 0xffffffff, 0x4, 0x3, 0xcfb, 0x401, 0x200, 0x6, 0x800, 0x3, 0x2, 0x1, 0x40, 0xfffffffc, 0x4, 0x9, 0x58d6, 0x0, 0x7, 0x800, 0x0, 0x9, 0x27dc0568, 0x10000, 0x6, 0x10000, 0x10000, 0x7fff, 0x8, 0x2, 0x3, 0x8, 0x7fff, 0x8d, 0xfffffffc, 0x80000001, 0x8, 0xc0000000, 0x7d, 0xb1a, 0x4, 0x3, 0x7, 0x8001, 0x6, 0x8000, 0x4, 0x8, 0x4684, 0x7fff, 0x7, 0x2, 0xd, 0x1ff, 0x4, 0x7, 0x1ff, 0xffff, 0x2, 0x1, 0xe57, 0x6f, 0x1, 0x6, 0x7f, 0x81, 0xfff, 0x5dae, 0x200, 0xfffffffe, 0x0, 0x9, 0x2, 0x5c, 0x5, 0x7f, 0x5, 0x7, 0x4, 0x4, 0x1, 0x6, 0x7fffffff, 0x5a, 0x8, 0x9, 0x2, 0x40, 0x1ff, 0x7fff, 0x9e7d, 0x8001, 0x8, 0x3, 0x3, 0x3, 0x3, 0x0, 0x80, 0x8001, 0x6000000, 0x1, 0xfff, 0x80000000, 0x7, 0x4, 0x0, 0x7, 0x4fe, 0x40, 0x1bf5, 0x1, 0x1ff00000, 0x1f, 0x40, 0x81, 0x100, 0x4, 0x4, 0x8, 0xe4, 0x4e3, 0x0, 0x1, 0x1000, 0x1000, 0xf28, 0x4, 0x80000000, 0x3, 0x10000, 0x8001, 0x0, 0x0, 0x7, 0x8, 0x7, 0x8001, 0xdddc, 0x1000, 0x5, 0x678, 0x8, 0x5, 0x6, 0x101, 0x8, 0x6, 0x7, 0x8, 0xe2f1, 0x7fff, 0x2, 0xb9cb, 0x4, 0x3, 0x38, 0x100, 0x0, 0xfff, 0x5, 0x100, 0x0, 0x0, 0x5, 0x7fff, 0x5a0, 0x6, 0x2, 0xc8a7, 0x1, 0x8, 0x3, 0x1, 0x7, 0x16, 0x5, 0x1, 0x80, 0xfffffc01, 0x20, 0x1, 0x6, 0x5, 0x2, 0x3, 0x3ff, 0x7ff, 0x100, 0x7, 0x8, 0x100, 0x9, 0x20, 0xffff, 0x1, 0x5, 0x3f, 0x8, 0x0, 0x4, 0x8, 0x6, 0x180, 0x5, 0xfffffffd, 0x600, 0x1, 0x1000, 0x0, 0xffffffff, 0xb69, 0x1ff, 0x1, 0xffffffff, 0xfffffff8, 0x2, 0x0, 0x7, 0x4, 0x886, 0x6, 0x3f, 0xfffff801, 0x8, 0x7f, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x8, 0x8001, 0x26f1, 0x1, {0x5c, 0x2, 0x969e, 0x1000, 0x8001, 0x1}, {0x1, 0x0, 0x6, 0xffff, 0x1, 0x80000001}, 0x3, 0x9, 0xffffff3d}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9b, 0x6adc, 0x200, 0x5, 0x0, 0x80, 0x7f, 0x7, 0x9, 0x1, 0x200, 0x8000, 0x40, 0x68c, 0x5, 0xfffffffa, 0x2000000, 0x3654, 0x0, 0x1f, 0x5, 0x1, 0x1bbe, 0xfffffa7b, 0x1, 0x7, 0x0, 0x4, 0x97, 0xa01, 0x1ff, 0x7, 0xff, 0x7fff, 0x2, 0x7, 0x0, 0x81, 0x0, 0x8af, 0xfffff801, 0x5d4d91f, 0xc98, 0xb52b, 0xd4, 0x1f, 0x4, 0x10001, 0x401, 0x5, 0x3ff, 0x7fffffff, 0x2a, 0x9, 0x8, 0x2, 0x401, 0x6, 0x6, 0x5, 0x3, 0x5, 0x3f, 0x0, 0x10000, 0x8000, 0x5, 0x0, 0x8001, 0x0, 0x80, 0x0, 0x5, 0x5, 0xffffffff, 0x52e, 0xffff0000, 0x3ff, 0xdfe, 0xffffff32, 0x8001, 0xfffffff9, 0x8, 0x100, 0x6, 0x9, 0x3b, 0x2, 0x7, 0x3, 0x0, 0x0, 0x93, 0x0, 0x4, 0x2, 0x0, 0x2c24, 0x5, 0x9, 0x0, 0x6, 0x9, 0x400, 0x6, 0x7, 0x300, 0x401, 0x10001, 0x4, 0x20, 0x50000, 0xffffffff, 0x5fc, 0xd9c7, 0x5, 0x3ff, 0x12, 0x1000, 0x3, 0x8000, 0x78f1, 0x80, 0x4782, 0x9, 0x101, 0xffffff80, 0x0, 0x101, 0x3, 0xffffffff, 0xffff0000, 0xd21, 0x9d, 0x1, 0x0, 0x2, 0x12c0, 0xffff, 0x1ff, 0x8, 0x0, 0x4, 0x7, 0x80, 0x10000, 0x800, 0x0, 0x8, 0x7fff, 0x3, 0x3, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x6, 0x1ff, 0x80, 0x80000001, 0x10000, 0x5, 0x8001, 0xfffffffb, 0x4, 0x0, 0xfff, 0x3, 0x2, 0x3f, 0x8, 0x1, 0xed5, 0x6, 0x806f, 0x3, 0x2, 0x4, 0x4, 0x8, 0x2, 0xc9c, 0x20, 0x8001, 0xc51, 0x8, 0x1f, 0x3, 0x8000, 0x3, 0x1fa, 0xffff, 0xfff, 0x3, 0x200, 0x5, 0x4, 0x0, 0x9, 0x10000, 0x800, 0x10001, 0x8, 0x3546, 0x6, 0xa8e2, 0x6, 0x3ff, 0x10001, 0x22, 0xaf, 0x7, 0x0, 0x9, 0x101, 0x5, 0x0, 0xf94d, 0x7f, 0x401, 0x2, 0xd58b, 0x20, 0x0, 0x80, 0x9, 0x3, 0x4, 0x8, 0x56e, 0x0, 0x7f, 0xa1, 0x8, 0x2, 0x9ef, 0x7, 0x401, 0x1, 0x0, 0x4, 0x1, 0x7, 0x7f, 0x2, 0x1ff, 0x7fff, 0x4c, 0xc66, 0xcd, 0x8060, 0x3, 0x7, 0x9cca, 0xfff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x5, 0x7ff, 0x8, 0x8001, {0x1, 0x0, 0x8, 0x1, 0x275, 0xffffffff}, {0x2, 0x0, 0x3f, 0x83, 0x5}, 0xfff, 0x6, 0x81}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000007, 0x3, 0xdd1, 0x8, {0x80, 0x0, 0x3ff, 0x0, 0x200, 0x1}, {0x80, 0x1, 0x1c9, 0xe00, 0x5, 0x10001}, 0x2, 0x1, 0x7fff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x18e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfbe, 0xffffffffffffffff, 0x1, 0x1, 0x80000000, {0x1f, 0x0, 0x3, 0xff10, 0x401, 0x4}, {0x0, 0x1, 0x7000, 0x9, 0x3, 0x9}, 0x8000, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xda, 0x1f, 0x1e518bb0, 0xffffffe1, 0x8, 0x6, 0x3, 0x527d, 0x1, 0x9, 0x6, 0x9, 0x40, 0x4, 0x77, 0x7, 0x0, 0x4, 0x80000001, 0x6, 0x80000000, 0x5a7d, 0x7, 0x24a3, 0xad4, 0x8, 0x5, 0x1, 0x8, 0xe3b, 0x58, 0x2a78, 0x401, 0x8, 0x10000, 0x8, 0x7fffffff, 0x9, 0x4, 0x6, 0x8, 0x800, 0x0, 0x4, 0x0, 0x6, 0x80000001, 0x4, 0x7, 0xfff, 0x80, 0xbeca, 0x10000, 0x3ff, 0x10000, 0x7fffffff, 0x7, 0x9, 0x2, 0x0, 0x6, 0x7, 0x7f, 0x1, 0x7ff, 0xbf80, 0x2, 0x2, 0xffffffff, 0x2, 0x0, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x1ff, 0x4, 0x9000, 0x40, 0x5, 0x26, 0x20000000, 0x400, 0xf30, 0x0, 0x6, 0x1, 0x7f, 0x1, 0x2, 0xffff, 0x1, 0x1, 0x72fe, 0x0, 0x4, 0x1, 0x2, 0x1, 0x1000, 0x7f, 0x9, 0x1, 0x800, 0x1, 0x800, 0x9, 0x2, 0x50, 0x2, 0x3ff, 0x80000000, 0x81d, 0x0, 0x4df39282, 0x5, 0x5, 0xd8f5, 0xfffffffc, 0x93d6, 0x6, 0xfffffff9, 0x8, 0x7, 0x4, 0x2, 0x101, 0x7, 0x8, 0xfffff973, 0x3ff, 0x100, 0x5, 0x4, 0x6, 0x4, 0x7fff, 0x7fff, 0xe6c, 0x5bd, 0xfffffffe, 0x5, 0x7, 0x5c, 0x200, 0x6, 0x6, 0x8, 0xc7e8, 0x9, 0x8, 0xffffff80, 0x1, 0x7, 0xfffffffd, 0x6, 0x7f, 0x8, 0x9, 0x6, 0xd7c, 0xd, 0x1, 0x8, 0x5, 0x6652, 0x7, 0x7, 0x28c, 0x9, 0x1, 0x8, 0x6, 0x3, 0x80000000, 0x0, 0x1, 0x9, 0x0, 0xfab, 0x8000, 0x8, 0x8, 0x10000, 0xfffffffe, 0x5632, 0x1ff, 0x2, 0x800, 0x9, 0x0, 0x3, 0x1, 0x4, 0x5, 0x7f, 0x6a9f, 0x5, 0x2, 0x4, 0x1, 0x6, 0x2, 0x9, 0x0, 0x1, 0x3, 0x7fffffff, 0x3928, 0x8, 0x3, 0xffffff01, 0x20, 0x80, 0x5, 0x7ff, 0x7fffffff, 0x18, 0x2, 0x71, 0x0, 0xff, 0x9, 0x9, 0x4, 0x6, 0x9, 0x7, 0x4, 0xffffffff, 0xfefe, 0x80000001, 0x1, 0x0, 0x7fff, 0x4, 0x3, 0x80000001, 0x1ff, 0x7fff, 0xffff, 0x5, 0x1f, 0x9, 0xffffffe0, 0x100, 0x80000000, 0x3, 0x16, 0x20, 0x8, 0x7f, 0xfffffffa, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x9, 0x50, 0x3, {0x5, 0x2, 0xed35, 0x7, 0x8000, 0x1000}, {0xa2, 0x2, 0x20, 0x8, 0x80, 0x7}, 0x218, 0x7, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8fb}]]}, {0xb2, 0x6, "6215fb6c0cd2a4104a75ff7deb90c304681840c9ae06c21b48e0d8d330b64dc4b585867ff08ec19641ee78519fc092d7c5f7cc60701dea386b789ee801923d114ddfc5fb4afeb57f8416ad107f6541b592125b41c28295f10d13162a74b40f253480cabac9e1370f11f3f5eebbc59089ac3377d47524ee854d1f3d72bad11b99d6446b1c1767c5c3a6df4732836be65a086b93a77990cd4929d70b858e74a47dc9547b1d79a3037339f5ac0ab4db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xefc, 0x1a, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x80000001, 0xbe27, 0x7, 0x0, 0x3}, 0x2, 0x9, [{0xffff, 0x4, 0x1f, 0x7b815968, 0x9, 0x8}]}, [{0xe8ee, 0xffff7fff, 0x5, 0x3, 0x10001}, {0x500, 0x3, 0xbf7, 0x6, 0xffffffff, 0x200}, {0x7, 0xff, 0x0, 0x0, 0x6, 0x1}, {0x80000001, 0x6, 0x6, 0x5, 0x5, 0xff}, {0x5, 0x2, 0x2, 0x1, 0xffffffff, 0x60}, {0x1, 0x5, 0x6, 0x5, 0x101, 0x7}, {0x2, 0x1000, 0x5, 0x2, 0x7, 0x4}, {0xb76, 0x0, 0x4bf1, 0x47, 0x1, 0xffff7fff}, {0x6, 0x3, 0x3, 0x1, 0xff, 0xa}, {0x19, 0x3f, 0x8, 0x7, 0x2, 0x4}, {0x3, 0x100, 0x400, 0x80, 0x40000000, 0x1c0000}, {0x62, 0x10000, 0x9, 0x1, 0x6, 0x10001}, {0x0, 0x0, 0x7f, 0x4, 0x81bc, 0x3}, {0x531f, 0x10001, 0x4, 0x7fffffff, 0x519}, {0x1ff, 0x7fff, 0x7f, 0x1, 0xff, 0xff12}, {0x5, 0x1, 0xfffffffa, 0x3ff, 0x0, 0x2}, {0x7c071261, 0x4e, 0x1, 0x4, 0x6, 0x3}, {0x9, 0x7fff, 0x200, 0x7, 0x8, 0xc3}, {0x1, 0x2, 0xc0, 0x8, 0x2, 0x9}, {0x2, 0x9, 0x0, 0x7, 0x401, 0x7fff}, {0xfff, 0x7, 0x0, 0x7fffffff, 0xfff, 0x8}, {0x4, 0x69, 0x1, 0xffffffff, 0x4, 0x7fff}, {0xfffffffa, 0x9, 0x1ff0000, 0x10000000, 0xe1b, 0x6}, {0x13, 0x3, 0x3, 0x8001, 0x3f, 0xeb28}, {0xe92a, 0x851c44d, 0x59736275, 0x401, 0x6, 0xb3}, {0x5, 0x3ffc, 0x6, 0x0, 0x3, 0x3012eba1}, {0x2, 0x1, 0x2, 0x4, 0x4bab}, {0x3f, 0x3, 0x8001, 0x8, 0x7, 0xffffffe0}, {0x1f, 0x80000001, 0x2, 0xb2f, 0xcac, 0x3ff}, {0x1f6, 0x9, 0x81, 0xd9, 0x8, 0x101}, {0x4, 0x655, 0x1000, 0x200, 0x1, 0x7fffffff}, {0x7, 0x80, 0x80000000, 0x3, 0x4, 0xf4}, {0x2, 0x8, 0x3ff, 0x3, 0x8, 0x6}, {0x9, 0x7fffffff, 0xcb1c, 0xc5e9, 0x1d3, 0x151}, {0x9, 0x5, 0x8, 0x6e0001ab, 0x5f, 0x1f}, {0x4, 0x6, 0x1f, 0x4, 0x6, 0x9}, {0x4, 0x40, 0x9, 0x1400000, 0x7ff, 0x401}, {0x5, 0xffffff81, 0x8000, 0x0, 0xd5, 0xde9f}, {0x0, 0xbf2, 0x8, 0x8, 0x6, 0x5e}, {0x30d, 0xfff, 0xffff, 0x1, 0xffffff01, 0x6}, {0x10001, 0x2, 0x6, 0xb8, 0x7, 0x5}, {0x4, 0x80000000, 0x6, 0x1a59, 0x0, 0x7}, {0x1, 0x40, 0x800, 0x9, 0x2f, 0x7}, {0x4, 0x7, 0x3, 0x2, 0x4903, 0x3}, {0x1, 0x619, 0x8, 0x6, 0x2f0ebb57, 0xdb4b}, {0x49dc, 0x81, 0x2, 0x6, 0x2, 0xe4}, {0x6, 0x9, 0x40, 0x7, 0x9, 0xfff}, {0x4, 0x9, 0x1000, 0x5, 0x2a, 0x6}, {0x5, 0x5, 0x8000, 0x6, 0x21, 0x895}, {0x1, 0x7e1, 0x3, 0x8, 0xfffffff7, 0x9}, {0x5, 0x68, 0x2, 0xffff7fff, 0x5, 0x91b0}, {0x10001, 0xffff, 0x10001, 0xa6, 0xfffff60b, 0x1ff}, {0xffffffff, 0xffff, 0x7, 0x100, 0x8, 0x7fffffff}, {0xffffff64, 0x0, 0xff, 0x13b, 0x3f, 0xfffffff7}, {0x1ff, 0x8000, 0x5, 0x51cd, 0x1f50, 0xb96}, {0x0, 0x5, 0x6, 0x401, 0x7, 0x200}, {0xfff, 0x1b, 0x1, 0xfffff001, 0x1, 0x100}, {0x7fff, 0x80000001, 0x2, 0x1, 0x237, 0x80000001}, {0x8fb, 0x2, 0x4, 0x7, 0x9}, {0x7fffffff, 0x3, 0x6, 0x50000, 0xfffffff7, 0x400000}, {0x0, 0x1, 0x7, 0x3, 0x0, 0x200}, {0x9, 0x8000, 0x8, 0x75a4637c, 0x9, 0x2}, {0xb976, 0x4bc, 0x7f, 0xffffffff, 0x200, 0x4}, {0x1ff, 0x7, 0x9dad, 0xff, 0x7fff, 0x100}, {0x8, 0x101, 0x1, 0x5, 0x80, 0x72}, {0x4, 0x1, 0x4, 0xc0000000, 0x7}, {0x8, 0x3, 0x7f, 0x61, 0x1}, {0x6, 0x4, 0x8, 0x80000000, 0x7, 0x3463}, {0x2, 0x79, 0x82, 0xcbf, 0x80000001, 0x5}, {0xff, 0x380, 0x7, 0x2, 0xff, 0x3f}, {0x7, 0x32e52d47, 0xe156, 0x6000000, 0x6, 0x6}, {0x44, 0x5, 0x737e, 0x2, 0x96a, 0x2}, {0x400, 0x9, 0xffff, 0x4, 0xfff, 0xffe00}, {0x101, 0x8, 0x80000001, 0x7f, 0x101, 0x4}, {0x8, 0x0, 0x400, 0x10000}, {0x6, 0x31, 0x3, 0x6, 0x5, 0x3}, {0x2, 0xacc, 0x0, 0x14e, 0x9}, {0x7fffffff, 0x78f, 0x3, 0x2, 0x3, 0xffffffff}, {0x8, 0x81, 0x3f, 0x5, 0x63d27d7b, 0x8}, {0xe2a9, 0x47cc, 0x9, 0x8, 0x6, 0x10000}, {0x7fff, 0x8, 0xb5b3, 0x5a, 0x0, 0x4000000}, {0x8, 0x20, 0xffff, 0x2, 0x80000000, 0xfb}, {0x5, 0x5, 0x6, 0x8, 0x5120, 0x1f}, {0x1, 0x5, 0x23, 0xc3, 0x8, 0x2}, {0x727, 0x6a, 0x401, 0x35800, 0x5, 0xf73}, {0x0, 0x8, 0x33e, 0x6, 0x10001, 0x3}, {0x0, 0x6, 0x554637bb, 0x400, 0x6, 0x7fffffff}, {0x9, 0x6, 0x7, 0x8d5, 0x1, 0x5f6}, {0x0, 0x8, 0x10000, 0x81, 0x176, 0x2330}, {0x266f, 0x5, 0x7, 0x8, 0x3, 0x9}, {0xffff, 0x3, 0x3, 0x200, 0x6, 0x3}, {0x2, 0x4, 0x8, 0x7ff, 0x3, 0x800000}, {0x4, 0x80, 0x101, 0x4, 0x8, 0x7}, {0x2, 0x9, 0x3, 0xefe6, 0x4000}, {0x4, 0x1, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1ff, 0x7, 0x7, 0x8, 0x1}, {0x9, 0x3, 0x6, 0x20000000, 0x5, 0x8}, {0x3000, 0x101, 0x6, 0x7, 0x2, 0x9}, {0xfffffffb, 0x9, 0x4, 0xc1, 0x8, 0xf5a9e526}, {0x6, 0x0, 0x0, 0x1, 0x2b4, 0xffff}, {0x3f, 0x8, 0x20, 0x0, 0xffff, 0x3}, {0x7, 0x388, 0xfffffffe, 0x7, 0x101, 0x6072}, {0x0, 0x5b8dc8e7, 0x9, 0x5, 0x80000001, 0x3}, {0x9, 0x20, 0x5b1e, 0xfff, 0x8001, 0x10000}, {0x1, 0x6, 0xffff, 0x4, 0x4, 0x7fff}, {0xeb1, 0x3, 0xaae7, 0x5, 0x21ade038, 0x2}, {0x3, 0x9, 0x6, 0x4, 0x200, 0x37b3}, {0x5, 0xffff0416, 0x0, 0x800, 0x1f, 0x6}, {0x5, 0x81, 0x7ff, 0x3, 0x6f23, 0xfffffffe}, {0x6, 0x3, 0x0, 0x7592, 0x8, 0x5}, {0x2, 0x401, 0x3, 0x80000000, 0x10000, 0x1f}, {0x6, 0x1, 0x3, 0x6, 0x3, 0xee}, {0x0, 0x10000, 0x7f, 0x2, 0x72, 0x80000000}, {0x4, 0x3, 0x4, 0xb6, 0x4, 0x8}, {0x4, 0x101, 0x9, 0x3e, 0x400, 0x3}, {0x200, 0x1, 0x33000000, 0x2, 0x800, 0xfffffeff}, {0x66e4, 0xffffffff, 0x2, 0x5, 0x81, 0x4}, {0xfffffffc, 0x7fffffff, 0xc8, 0xaa, 0x3, 0x81}, {0x7, 0x8, 0x3, 0x9, 0x2, 0x6}, {0xfffff000, 0x400, 0x8, 0x7, 0x6, 0x8}, {0x4, 0x9, 0x8, 0x8, 0x9, 0x9}, {0x3, 0x8001, 0x7, 0x0, 0x1, 0x7}, {0x60000, 0x3000, 0x80, 0x1, 0x6, 0x1}, {0x4e80000, 0x0, 0xfff, 0x40, 0xfffffffe, 0x7}, {0x1, 0x3, 0x85, 0x6, 0x5, 0x40}, {0xff, 0x5, 0x7, 0x3, 0x5b2d, 0x1}, {0x8, 0xffffff38, 0x0, 0x80000001, 0x7, 0xf1}, {0x10000, 0x1f, 0x2, 0x0, 0x4, 0x42797925}], [{0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3}, {0x5}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x5}]}}]}, {0x96, 0x6, "6124567f1dd40bbed3254fcbc836e6cc9cf3f170f3423f2e6502f93f9e413bdb19718d3ee6cf4d0b1205f906a5a7e5ac2d71be700ad57d8f8e2035bbb76c3e4b606bdf68c3108d6f0244d406fa528b948d7c86ff8762842cb92f490feec1c5bf2ed84b6cc5e681306b1027d4714fb695c2c853955646b31bfa699b4694cc3f77be6c94179630fc67b5787f2f911f06cedc41"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1d8, 0x1c, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xea, 0x6, {0x4, 'security\x00', 0x3, 0x200, "87bc4771d350923200c505bf52da11fb74b9025f347c1dbd09eb49292a6ec2c05b8707712ec8c69615e7db48836d761ba1a108bc6c7a3b9c9dd17dda69594a37c7ee9dfdb417f22a292125de91cec015bb10eeda62b003d83eed01ba4b7240c785eb7f34c0b208958d23351e2c90682e3a98f7b280c982b4edd7d8ef0dd9a01b09402e2b14f8c1a379dadf85b42012a801ca503c9ddc90dd48c191642b769c018c13d2cef12504b8f3e79136f815145d5acf149d816811cbcbf9fb0a21342e21"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0x6b, 0x6, "dd5d4faa4b0b0c7b6930f5cb3f8c1af4060c4c9da2d15752fe5782e7949320958b2decc901d8cbb67744dfbe914c09f42aaf1429b87c39654ed75edbe7db788991d0a005c293746b706b795c9f82f3ebb84be3b56a6448437c29529be08bfdde3f42949312d552"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}, @m_gact={0x7c, 0x11, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x6b0, 0x1}}]}, {0x44, 0x6, "0d04c38fdade186bf6ba4ed04afbc4a813920dd873980ab1e564a50240ce93a4eb7a05cf54eda65c2c37d964ce31c29d230b05734a69e668d6dded2f72b8c215"}, {0xc, 0x7, {0x1, 0x176f8359003b8c11}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1dc, 0x4, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0xfaee, 0x3, 0x9, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x6, 0x9, 0x4}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x5, 0x1b0b, 0x100}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x101, 0xffffffffffffffff, 0x4, 0x2}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x4, 0x61, 0x2}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f8, 0x67, 0x20000000, 0x4a620c33}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0x2, 0x9, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7c52f924, 0x3, 0x9, 0x3}, 0x2}}]}, {0xb0, 0x6, "7cb386a08cc3b65655f9962c7bf7ce42f7c96b8933cf523401b81cbcd4aef7f6e942d03bf943bea5ecff87c8e200b763bdf66fd18366c7e3f4df49774bf59cce0a619a82e14346ca8ed79b072fc5923160559bbc426339a9a7462d60a2f957e861aa22b68537a9d3a2bab784911acb5dd3020f28c136a6a3bc98275141367560d02328e356805834a72f12fe893206f9937524f4c969f180b27651de80fadf15fb16740d5aa412da290c9b34"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x150, 0x1d, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d780d00c35056bdf011c65de4321fec7"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0xe3, 0x6, "8ff0a876774ea3b82b68e2b04190994b37a5a9514e39be2a37a2bf5c65336df5acb4dffe6f47a8f581dda4985ebc5c85c3ea7f53847526518c91bb774ca032bafe73cba6c7a7b932f0fbb1e3dc2afd0494d0f50e4bfc827d93f7a2d749a7664c51f39979fc23aabc582b750033e23917616870e91a57c1d1b6679fdd99c73698a8ad2264f28de8adf2099e24fe80432ec90df17d74224db4d4008f1bb62cd90227f1b5e9bd2629814eb475c5418a2af12ef52b2f168062367ea706452409c6a8cd1314717e5b059900e43163a76722208e309fe5fc3e353016010110904898"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xb3}, @TCA_FW_POLICE={0x834, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffff, 0x9d6f, 0xb9, 0x0, 0x3, 0x7, 0xffffff8a, 0x7, 0x80000000, 0x7, 0x9730, 0x8, 0x1f, 0x5, 0x1ff, 0x2, 0x6, 0x1000, 0x0, 0xafd, 0x9, 0x1, 0x4, 0x7, 0x101, 0x4, 0x971, 0x9, 0x6, 0x7, 0x10001, 0x2, 0x1, 0x4, 0x6, 0x7, 0x1ff, 0xfff, 0x1000, 0x9, 0x4, 0x40, 0x7, 0x6, 0x1, 0x3, 0xfffff001, 0x31c, 0x5, 0x0, 0x7, 0x7fffffff, 0x7651, 0xfffffffb, 0x1, 0x0, 0x7fffffff, 0x8, 0x0, 0x7, 0x10000, 0x20, 0x7, 0x9, 0x6, 0x1, 0x4, 0x7fffffff, 0x4, 0x6, 0x1, 0x1, 0x7ff, 0xffffffff, 0x100, 0x7, 0x6, 0x750, 0xde45, 0x2, 0x40, 0x7fffffff, 0x7, 0xfffff162, 0xffff, 0x9, 0x1, 0x0, 0xe80, 0xfff, 0x200, 0x2, 0x6, 0x0, 0x8, 0xed3d, 0x401, 0x0, 0x9, 0x9, 0x200, 0x1, 0x40, 0x8, 0x3b, 0xff, 0x166, 0x6, 0x5, 0x0, 0x1, 0xfc0a, 0x3, 0x2, 0x7, 0x8, 0xff, 0x6, 0x7, 0x6, 0x7fffffff, 0x5, 0xd2, 0x2, 0x5, 0x95c, 0xffff, 0x4, 0x9, 0x7, 0x800, 0x2, 0x6, 0x4, 0x2, 0x8001, 0xe882, 0x0, 0x400, 0xee6, 0x6, 0x4, 0x5, 0x2, 0xc0000, 0x1f, 0x4, 0x0, 0x5, 0xfffff181, 0x0, 0x100, 0x244, 0x3, 0x6, 0xffffffff, 0xc053, 0x9, 0x0, 0x8, 0x9, 0x9, 0x5, 0xc44c, 0x80000001, 0x52de39a6, 0x6, 0x5, 0x4be, 0xffffffff, 0x7, 0x69, 0x6, 0x5, 0x3b6, 0x2, 0x2, 0xb35e, 0x9, 0x40, 0x7, 0x7, 0x9, 0xffff, 0x80000001, 0x40, 0x800, 0x4ffc, 0x1, 0x1, 0xffffffff, 0xf795, 0x0, 0xe4, 0x10001, 0x7, 0x0, 0x10000, 0x4, 0x8000, 0x7f, 0xe7d, 0x7d8f, 0x8, 0x6, 0x7, 0xfffffc01, 0x2, 0x6, 0x6, 0x9, 0x5, 0x9, 0x6, 0x7fffffff, 0x401, 0x2, 0xfff, 0xe0, 0x3f, 0x1, 0x3, 0x9, 0xe59, 0x1, 0x5, 0x81, 0x3ff, 0x8, 0x1000, 0x401, 0x10000, 0x7, 0x9, 0x20, 0xfffff99b, 0x400, 0x2, 0x6, 0xa323, 0x5, 0x3, 0x4, 0xf4e, 0x0, 0xa377fa7, 0x1200, 0x6, 0x1, 0xff, 0x3a9, 0x8, 0x7d912899, 0x3f, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6d, 0x6, 0x6, 0x0, 0x2, 0x5, 0x0, 0x3, 0x4f1e, 0x80000000, 0x2, 0x5, 0x28f3, 0x6, 0x7ba50993, 0x6, 0x400, 0x81, 0x5f4d, 0x2, 0x80000000, 0x5, 0xffff, 0x8, 0x800, 0x8, 0x106b, 0x2800, 0x8000000, 0x0, 0xfff, 0x3f, 0x0, 0x4, 0x8, 0x1, 0x0, 0x4, 0x8, 0x0, 0x1, 0x800, 0x6, 0xa7, 0x8, 0xe0000000, 0x87, 0x7fffffff, 0x9, 0x1, 0xfffffffb, 0xffff, 0x5, 0x7, 0x4, 0x6, 0xeaaf, 0x4, 0x101, 0x9, 0x67, 0x5, 0xffffffe0, 0x8956, 0x1, 0x40, 0x2, 0x6, 0x3485, 0x7c81, 0x0, 0x5, 0x9, 0x541, 0x5, 0x5, 0x0, 0x81, 0x9475, 0x3, 0x3, 0x2, 0x1, 0x6, 0x4, 0x7fffffff, 0x3, 0x9, 0x6, 0x8, 0x2, 0x10000, 0x8, 0x5, 0x4, 0x1, 0x9, 0x3ff, 0x7, 0x5cf593ee, 0x1ff, 0x7, 0x7, 0x4, 0x9, 0xf63, 0x101, 0x1, 0x5751, 0x683f, 0x3ff, 0x102, 0x2, 0x401, 0xffff, 0x43, 0x0, 0xbf3, 0x8, 0x7f, 0x8, 0x200000, 0x2ba400, 0x0, 0x9, 0x2, 0x3ff, 0xffff, 0x7, 0x8000, 0x10001, 0x80, 0x66f56fbf, 0x1, 0xdcf, 0x3, 0x35, 0x7, 0x7fffffff, 0x80000000, 0x44e2753d, 0x3, 0x80000000, 0x7, 0x7ff, 0x8000, 0xc, 0xe844, 0x3, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x9, 0x2, 0x7, 0x6, 0x8, 0x4, 0x7f, 0x9, 0x0, 0x8016, 0x8, 0x9, 0x0, 0x7ff, 0x1, 0x2000000, 0xc4, 0x1f, 0x8, 0x262, 0x1, 0xe93, 0x3ff, 0x73f, 0x6, 0x3, 0x101, 0x1, 0x6, 0x1, 0xffff334e, 0x8, 0xff, 0xe1, 0x9, 0x9, 0x5, 0x7, 0x9, 0x5c2, 0xffff0001, 0x1ff, 0x81, 0x3, 0x10000, 0x8, 0xfffffffb, 0x1, 0xff, 0x2, 0x7fff, 0x4, 0x101, 0x10001, 0x800, 0x400, 0x4, 0x4, 0x5, 0x80000000, 0x8, 0x8, 0x9, 0x84, 0x400, 0x100, 0x1, 0x579b7bf2, 0x1, 0x1, 0x7, 0x4, 0xedf, 0xb97, 0x4, 0x3, 0x7, 0x5, 0x400, 0x400, 0x9, 0x20, 0x1f, 0x1ff, 0xfffffff8, 0x4, 0x0, 0x1, 0x4, 0xfffffbff, 0x5, 0xffffffff, 0x7fffffff, 0x1, 0x7f, 0x2, 0x49, 0x7fffffff, 0x200, 0x3f, 0x1e92, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff5}}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0xce, 0x0, 0x4, 0x5, 0x3f, 0x9, 0x1, 0x3, 0x1, 0x2, 0x500d, 0x6, 0xfffffff9, 0x4, 0x4, 0x5, 0xd182, 0xfffff8c6, 0x195c, 0x7f, 0x0, 0xa523, 0x7, 0x1, 0x8001, 0x34, 0x40, 0x7fff, 0x2, 0xfff, 0xfff, 0x1, 0x1, 0x800, 0x8, 0x8001, 0x6, 0x80, 0x7, 0x8, 0x1, 0x7fffffff, 0x3f, 0xff, 0x8, 0x40, 0x3, 0x1, 0x8, 0x9, 0x401, 0x46bbee6d, 0x1, 0xfffffffb, 0x2, 0x0, 0x29, 0x7fff, 0xffff, 0x6, 0x7fffffff, 0x6, 0x5, 0xffff, 0x9, 0x8, 0x7, 0x6, 0x2e9a, 0x6, 0x80000001, 0x8, 0x61a, 0x0, 0x1f, 0x645, 0x1, 0x5, 0x401, 0x20, 0xffff, 0x1, 0x0, 0x6, 0xfff, 0xbca, 0x1, 0xaf, 0x3, 0x1, 0x5, 0xd5d, 0x1000, 0x3f4b, 0x8, 0x3, 0x5203, 0x1ff, 0x4f, 0xa13b, 0x5b, 0x6, 0x2, 0xba82, 0x10000, 0x6, 0x1, 0x10001, 0x80000000, 0x0, 0x8, 0x80, 0x11, 0x4, 0x7, 0x7ff, 0x19, 0x94, 0xfffffff8, 0x2, 0x1, 0x0, 0xffff, 0x40, 0x6, 0x1, 0x8, 0xfff, 0x4, 0x0, 0x8000, 0x0, 0x8, 0xff, 0x8, 0xfffffff8, 0x4b8, 0x8, 0xdf97, 0x8, 0x5, 0x6, 0x2, 0x4, 0x2b21440d, 0x40000000, 0x1f, 0x4, 0x401, 0x9, 0x9, 0x7fffffff, 0x3, 0x7f, 0x80, 0x1, 0x1, 0x6, 0xfffffff9, 0x40, 0x7fffffff, 0x9, 0xffffff00, 0xfffffffc, 0x14000, 0x7fd1, 0x8000, 0x5, 0x800, 0x4, 0x96, 0x8, 0xfffffff9, 0xac, 0x400, 0x80, 0x1, 0x1, 0x9c7, 0x7, 0x10000, 0x8000, 0xa4c, 0x65d9, 0x5, 0x80000000, 0x3ff, 0x4, 0x4, 0x1, 0x6, 0x0, 0x1f, 0x2, 0x5, 0x101, 0x9, 0x9, 0x9, 0x10001, 0xfffffff9, 0x4, 0x800, 0x5f, 0x401, 0x0, 0x8, 0x1, 0x3f, 0x2, 0x9, 0x1, 0x8001, 0x4, 0x2, 0x8, 0x4, 0x80000001, 0x2f57, 0x1, 0x5, 0x4, 0x7, 0x3, 0x7, 0x8, 0x8, 0x0, 0x401, 0x533c, 0x1, 0x2, 0x7f, 0x401, 0x4e, 0x8, 0x7, 0x101, 0xfffffffd, 0x1, 0x1, 0x5, 0x5, 0x8, 0x40, 0x40, 0x80000000, 0x3ff, 0x2dfa7867, 0x8, 0x1000, 0x4543, 0x7f, 0x101]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x20, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x89cc}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@remote, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) 13:07:07 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x356, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x800001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x33}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001200)='/dev/fb0\x00', 0x1431c0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000001240)={0x500, 0x4b0, 0x320, 0x2000, 0x80, 0x9, 0x4, 0x1, {0x3, 0x2}, {0x7f, 0x8}, {0x98c4, 0x2}, {0x1000, 0x0, 0x1}, 0x3, 0x2, 0xc9ff, 0xcb71, 0x1, 0x8001, 0x1, 0x2, 0x2, 0x5, 0x6a3, 0x3, 0x0, 0x4, 0x3, 0x5}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0xe0) recvmsg$kcm(r3, &(0x7f00000011c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1}, 0x12000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001300)='/dev/ashmem\x00', 0x208a41, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000001340)={0x5, 0x81}) 13:07:07 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2058.407351] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2058.426388] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2058.462365] CPU: 1 PID: 21850 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2058.470285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:07:07 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2058.479668] Call Trace: [ 2058.479687] dump_stack+0x1b2/0x281 [ 2058.479701] warn_alloc.cold+0x96/0x1cc [ 2058.479714] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.479724] ? trace_hardirqs_on+0x10/0x10 [ 2058.479734] ? deref_stack_reg+0x124/0x1a0 13:07:07 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2058.479748] ? fs_reclaim_release+0xd0/0x110 [ 2058.479765] __vmalloc_node_range+0x10e/0x150 [ 2058.479780] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.479788] vmalloc_user+0x47/0xa0 [ 2058.479797] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.479807] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.479815] vb2_vmalloc_alloc+0xa6/0x2d0 13:07:07 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:07 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x0, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2058.479827] __vb2_queue_alloc+0x47a/0xd90 [ 2058.479847] vb2_core_create_bufs+0x279/0x5a0 [ 2058.479858] ? __vb2_queue_free+0x7a0/0x7a0 [ 2058.479872] ? futex_wait+0x42f/0x5a0 [ 2058.479882] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.479892] ? trace_hardirqs_on+0x10/0x10 [ 2058.479903] vb2_create_bufs+0x2e1/0x5b0 [ 2058.479917] ? vb2_thread_start+0x310/0x310 [ 2058.479926] ? futex_wait+0x42f/0x5a0 [ 2058.479942] v4l_create_bufs+0xa4/0x150 [ 2058.479953] __video_do_ioctl+0x65b/0x6a0 [ 2058.479968] ? video_ioctl2+0x30/0x30 [ 2058.479978] ? __might_fault+0x177/0x1b0 [ 2058.479987] ? video_ioctl2+0x30/0x30 [ 2058.479996] video_usercopy+0xfd/0xe70 [ 2058.480010] ? v4l_g_ctrl+0x390/0x390 [ 2058.480017] ? lock_acquire+0x170/0x3f0 [ 2058.480027] ? lock_downgrade+0x740/0x740 [ 2058.480037] ? trace_hardirqs_on+0x10/0x10 [ 2058.480048] ? futex_exit_release+0x220/0x220 [ 2058.480058] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.480068] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2058.480079] v4l2_ioctl+0x1bb/0x2f0 [ 2058.480087] ? v4l2_open+0x2f0/0x2f0 [ 2058.480098] do_vfs_ioctl+0x75a/0xff0 [ 2058.480110] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.480118] ? lock_downgrade+0x740/0x740 [ 2058.480132] ? __fget+0x225/0x360 [ 2058.480141] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.480153] ? security_file_ioctl+0x83/0xb0 [ 2058.480163] SyS_ioctl+0x7f/0xb0 [ 2058.480171] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.480182] do_syscall_64+0x1d5/0x640 [ 2058.480202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.480210] RIP: 0033:0x466459 [ 2058.480215] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.480225] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2058.480231] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2058.480237] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.480242] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2058.480247] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 [ 2058.512075] Mem-Info: [ 2058.512101] active_anon:87286 inactive_anon:27052 isolated_anon:0 [ 2058.512101] active_file:2220 inactive_file:8616 isolated_file:0 [ 2058.512101] unevictable:0 dirty:178 writeback:0 unstable:0 [ 2058.512101] slab_reclaimable:14509 slab_unreclaimable:128068 [ 2058.512101] mapped:59216 shmem:27412 pagetables:6967 bounce:0 [ 2058.512101] free:1354633 free_pcp:160 free_cma:0 [ 2058.512121] Node 0 active_anon:348752kB inactive_anon:59440kB active_file:4824kB inactive_file:32256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232560kB dirty:660kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.512139] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2058.512143] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.512166] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2058.512200] Node 0 DMA32 free:1429168kB min:36200kB low:45248kB high:54296kB active_anon:348752kB inactive_anon:59440kB active_file:4824kB inactive_file:32256kB unevictable:0kB writepending:756kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27868kB bounce:0kB free_pcp:640kB local_pcp:396kB free_cma:0kB [ 2058.512223] lowmem_reserve[]: 0 0 0 0 0 [ 2058.512243] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.512264] lowmem_reserve[]: 0 0 0 0 0 [ 2058.512285] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2058.512308] lowmem_reserve[]: 0 0 0 0 0 [ 2058.512329] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2058.512411] Node 0 DMA32: 1304*4kB (UE) 2338*8kB (UE) 2781*16kB (UE) 2292*32kB (UME) 4307*64kB (UM) 2125*128kB (UM) 741*256kB (U) 356*512kB (UM) 155*1024kB (U) 102*2048kB (U) 0*4096kB = 1428992kB [ 2058.512487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2058.512536] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2058.512623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.512630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2058.512637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2058.512642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2058.512646] 35309 total pagecache pages [ 2058.512657] 0 pages in swap cache [ 2058.512662] Swap cache stats: add 0, delete 0, find 0/0 [ 2058.512666] Free swap = 0kB [ 2058.512669] Total swap = 0kB [ 2058.512675] 2097051 pages RAM [ 2058.512679] 0 pages HighMem/MovableOnly [ 2058.512682] 363849 pages reserved [ 2058.512685] 0 pages cma reserved [ 2058.513605] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2058.513626] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2058.513649] CPU: 1 PID: 21862 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2058.513654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.513658] Call Trace: [ 2058.513681] dump_stack+0x1b2/0x281 [ 2058.513699] warn_alloc.cold+0x96/0x1cc [ 2058.513713] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.513726] ? trace_hardirqs_on+0x10/0x10 [ 2058.513742] ? deref_stack_reg+0x124/0x1a0 [ 2058.513761] ? fs_reclaim_release+0xd0/0x110 [ 2058.513781] __vmalloc_node_range+0x10e/0x150 [ 2058.513800] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.513810] vmalloc_user+0x47/0xa0 [ 2058.513822] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.513837] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.513850] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.513866] __vb2_queue_alloc+0x47a/0xd90 [ 2058.513891] vb2_core_create_bufs+0x279/0x5a0 [ 2058.513904] ? __vb2_queue_free+0x7a0/0x7a0 [ 2058.513920] ? _raw_spin_unlock_irq+0x50/0x80 [ 2058.513930] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.513940] ? trace_hardirqs_on+0x10/0x10 [ 2058.513953] vb2_create_bufs+0x2e1/0x5b0 [ 2058.513967] ? vb2_thread_start+0x310/0x310 [ 2058.513977] ? _raw_spin_unlock_irq+0x50/0x80 [ 2058.513993] v4l_create_bufs+0xa4/0x150 [ 2058.514004] __video_do_ioctl+0x65b/0x6a0 [ 2058.514020] ? video_ioctl2+0x30/0x30 [ 2058.514030] ? __might_fault+0x177/0x1b0 [ 2058.514041] ? video_ioctl2+0x30/0x30 [ 2058.514050] video_usercopy+0xfd/0xe70 [ 2058.514065] ? v4l_g_ctrl+0x390/0x390 [ 2058.514073] ? lock_acquire+0x170/0x3f0 [ 2058.514086] ? trace_hardirqs_on+0x10/0x10 [ 2058.514100] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2058.514112] v4l2_ioctl+0x1bb/0x2f0 [ 2058.514120] ? v4l2_open+0x2f0/0x2f0 [ 2058.514132] do_vfs_ioctl+0x75a/0xff0 [ 2058.514144] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.514152] ? lock_downgrade+0x740/0x740 [ 2058.514166] ? __fget+0x225/0x360 [ 2058.514176] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.514197] ? security_file_ioctl+0x83/0xb0 [ 2058.514211] SyS_ioctl+0x7f/0xb0 [ 2058.514221] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.514234] do_syscall_64+0x1d5/0x640 [ 2058.514249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.514258] RIP: 0033:0x466459 [ 2058.514263] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.514275] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2058.514282] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2058.514288] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.514295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2058.514302] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 [ 2058.638377] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2058.638404] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2058.638427] CPU: 1 PID: 21878 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2058.638433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.638436] Call Trace: [ 2058.638455] dump_stack+0x1b2/0x281 [ 2058.638470] warn_alloc.cold+0x96/0x1cc [ 2058.638484] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.638495] ? trace_hardirqs_on+0x10/0x10 [ 2058.638506] ? deref_stack_reg+0x124/0x1a0 [ 2058.638520] ? fs_reclaim_release+0xd0/0x110 [ 2058.638536] __vmalloc_node_range+0x10e/0x150 [ 2058.638551] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.638558] vmalloc_user+0x47/0xa0 [ 2058.638570] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.638580] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.638589] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.638600] __vb2_queue_alloc+0x47a/0xd90 [ 2058.638625] vb2_core_create_bufs+0x279/0x5a0 [ 2058.638637] ? __vb2_queue_free+0x7a0/0x7a0 [ 2058.638653] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.638664] ? trace_hardirqs_on+0x10/0x10 [ 2058.638677] vb2_create_bufs+0x2e1/0x5b0 [ 2058.638691] ? vb2_thread_start+0x310/0x310 [ 2058.638721] v4l_create_bufs+0xa4/0x150 [ 2058.638735] __video_do_ioctl+0x65b/0x6a0 [ 2058.638751] ? video_ioctl2+0x30/0x30 [ 2058.638763] ? __might_fault+0x177/0x1b0 [ 2058.638774] ? video_ioctl2+0x30/0x30 [ 2058.638784] video_usercopy+0xfd/0xe70 [ 2058.638798] ? v4l_g_ctrl+0x390/0x390 [ 2058.638806] ? lock_acquire+0x170/0x3f0 [ 2058.638815] ? lock_downgrade+0x740/0x740 [ 2058.638826] ? trace_hardirqs_on+0x10/0x10 [ 2058.638838] ? futex_exit_release+0x220/0x220 [ 2058.638848] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.638861] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2058.638874] v4l2_ioctl+0x1bb/0x2f0 [ 2058.638883] ? v4l2_open+0x2f0/0x2f0 [ 2058.638894] do_vfs_ioctl+0x75a/0xff0 [ 2058.638906] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.638915] ? lock_downgrade+0x740/0x740 [ 2058.638929] ? __fget+0x225/0x360 [ 2058.638939] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.638949] ? security_file_ioctl+0x83/0xb0 [ 2058.638960] SyS_ioctl+0x7f/0xb0 [ 2058.638967] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.638980] do_syscall_64+0x1d5/0x640 [ 2058.638996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.639005] RIP: 0033:0x466459 [ 2058.639011] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.639023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2058.639029] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2058.639035] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.639041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2058.639047] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2058.653160] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2058.653182] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2058.653206] CPU: 1 PID: 21876 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2058.653211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2058.653216] Call Trace: [ 2058.653236] dump_stack+0x1b2/0x281 [ 2058.653252] warn_alloc.cold+0x96/0x1cc [ 2058.653263] ? zone_watermark_ok_safe+0x220/0x220 [ 2058.653274] ? trace_hardirqs_on+0x10/0x10 [ 2058.653285] ? deref_stack_reg+0x124/0x1a0 [ 2058.653299] ? fs_reclaim_release+0xd0/0x110 [ 2058.653315] __vmalloc_node_range+0x10e/0x150 [ 2058.653333] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.653342] vmalloc_user+0x47/0xa0 [ 2058.653353] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.653364] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2058.653373] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2058.653383] __vb2_queue_alloc+0x47a/0xd90 [ 2058.653409] vb2_core_create_bufs+0x279/0x5a0 [ 2058.653423] ? __vb2_queue_free+0x7a0/0x7a0 [ 2058.653439] ? futex_wait+0x42f/0x5a0 [ 2058.653453] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.653464] ? trace_hardirqs_on+0x10/0x10 [ 2058.653479] vb2_create_bufs+0x2e1/0x5b0 [ 2058.653496] ? vb2_thread_start+0x310/0x310 [ 2058.653508] ? futex_wait+0x42f/0x5a0 [ 2058.653524] v4l_create_bufs+0xa4/0x150 [ 2058.653536] __video_do_ioctl+0x65b/0x6a0 [ 2058.653552] ? video_ioctl2+0x30/0x30 [ 2058.653567] ? __might_fault+0x177/0x1b0 [ 2058.653578] ? video_ioctl2+0x30/0x30 [ 2058.653588] video_usercopy+0xfd/0xe70 [ 2058.653603] ? v4l_g_ctrl+0x390/0x390 [ 2058.653614] ? lock_acquire+0x170/0x3f0 [ 2058.653623] ? lock_downgrade+0x740/0x740 [ 2058.653633] ? trace_hardirqs_on+0x10/0x10 [ 2058.653643] ? futex_exit_release+0x220/0x220 [ 2058.653662] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2058.653676] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2058.653690] v4l2_ioctl+0x1bb/0x2f0 [ 2058.653699] ? v4l2_open+0x2f0/0x2f0 [ 2058.653720] do_vfs_ioctl+0x75a/0xff0 [ 2058.653734] ? ioctl_preallocate+0x1a0/0x1a0 [ 2058.653743] ? lock_downgrade+0x740/0x740 [ 2058.653758] ? __fget+0x225/0x360 [ 2058.653769] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.653782] ? security_file_ioctl+0x83/0xb0 [ 2058.653792] SyS_ioctl+0x7f/0xb0 [ 2058.653800] ? do_vfs_ioctl+0xff0/0xff0 [ 2058.653811] do_syscall_64+0x1d5/0x640 [ 2058.653825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2058.653833] RIP: 0033:0x466459 13:07:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x3, 0x8f3, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x39d7, 0x0, 0x0, 0x7fff]}}}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x10, 0x6, {0x0, 0xea60}, {0x3, 0xf, 0x0, 0x80, 0x81, 0x0, "0f94b10b"}, 0x5, 0x1, @fd=0xffffffffffffffff, 0x7fffffff}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0xaa3, 0x0, 0x4, 0x110800, 0x6, {0x0, 0xea60}, {0x2, 0x8, 0x7, 0x20, 0x80, 0xb9, "e3cbcdfe"}, 0x1ff, 0x4, @fd=r2, 0x7d, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) 13:07:09 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:09 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2058.653838] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2058.653848] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2058.653854] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2058.653860] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2058.653866] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2058.653873] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:09 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2060.537952] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2060.574000] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2060.581611] CPU: 1 PID: 21951 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2060.589569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2060.598921] Call Trace: [ 2060.601509] dump_stack+0x1b2/0x281 [ 2060.605139] warn_alloc.cold+0x96/0x1cc [ 2060.609107] ? zone_watermark_ok_safe+0x220/0x220 [ 2060.613971] ? trace_hardirqs_on+0x10/0x10 [ 2060.618188] ? deref_stack_reg+0x124/0x1a0 [ 2060.622403] ? fs_reclaim_release+0xd0/0x110 [ 2060.626793] __vmalloc_node_range+0x10e/0x150 [ 2060.631290] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2060.636645] vmalloc_user+0x47/0xa0 [ 2060.640253] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2060.644552] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2060.649899] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2060.654028] __vb2_queue_alloc+0x47a/0xd90 [ 2060.658249] vb2_core_create_bufs+0x279/0x5a0 [ 2060.662723] ? __vb2_queue_free+0x7a0/0x7a0 [ 2060.667044] ? futex_wait+0x42f/0x5a0 [ 2060.670838] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2060.676185] ? trace_hardirqs_on+0x10/0x10 [ 2060.680401] vb2_create_bufs+0x2e1/0x5b0 [ 2060.684455] ? vb2_thread_start+0x310/0x310 [ 2060.688785] ? futex_wait+0x42f/0x5a0 [ 2060.692571] v4l_create_bufs+0xa4/0x150 [ 2060.696535] __video_do_ioctl+0x65b/0x6a0 [ 2060.700666] ? video_ioctl2+0x30/0x30 [ 2060.704447] ? __might_fault+0x177/0x1b0 [ 2060.708487] ? video_ioctl2+0x30/0x30 [ 2060.712267] video_usercopy+0xfd/0xe70 [ 2060.716136] ? v4l_g_ctrl+0x390/0x390 [ 2060.719914] ? lock_acquire+0x170/0x3f0 [ 2060.723881] ? lock_downgrade+0x740/0x740 [ 2060.728008] ? trace_hardirqs_on+0x10/0x10 [ 2060.732222] ? futex_exit_release+0x220/0x220 [ 2060.736698] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2060.741783] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2060.746780] v4l2_ioctl+0x1bb/0x2f0 [ 2060.750384] ? v4l2_open+0x2f0/0x2f0 [ 2060.754095] do_vfs_ioctl+0x75a/0xff0 [ 2060.757883] ? ioctl_preallocate+0x1a0/0x1a0 [ 2060.762286] ? lock_downgrade+0x740/0x740 [ 2060.766433] ? __fget+0x225/0x360 [ 2060.769875] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.773828] ? security_file_ioctl+0x83/0xb0 [ 2060.778213] SyS_ioctl+0x7f/0xb0 [ 2060.781559] ? do_vfs_ioctl+0xff0/0xff0 [ 2060.785513] do_syscall_64+0x1d5/0x640 [ 2060.789380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2060.794562] RIP: 0033:0x466459 [ 2060.797728] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2060.805413] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2060.812663] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2060.819963] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2060.827209] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2060.834470] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2060.842747] warn_alloc_show_mem: 3 callbacks suppressed [ 2060.842751] Mem-Info: [ 2060.851247] active_anon:85648 inactive_anon:27052 isolated_anon:0 [ 2060.851247] active_file:2220 inactive_file:8616 isolated_file:0 [ 2060.851247] unevictable:0 dirty:193 writeback:0 unstable:0 [ 2060.851247] slab_reclaimable:14508 slab_unreclaimable:127645 [ 2060.851247] mapped:59151 shmem:27412 pagetables:6858 bounce:0 [ 2060.851247] free:1343312 free_pcp:258 free_cma:0 [ 2060.885562] Node 0 active_anon:342200kB inactive_anon:59440kB active_file:4824kB inactive_file:32256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232300kB dirty:720kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.914150] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2060.941665] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2060.968489] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2060.973535] Node 0 DMA32 free:1383364kB min:36200kB low:45248kB high:54296kB active_anon:342200kB inactive_anon:59440kB active_file:4824kB inactive_file:32256kB unevictable:0kB writepending:720kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15520kB pagetables:27432kB bounce:0kB free_pcp:1372kB local_pcp:696kB free_cma:0kB [ 2061.003714] lowmem_reserve[]: 0 0 0 0 0 [ 2061.007865] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2061.033485] lowmem_reserve[]: 0 0 0 0 0 [ 2061.037558] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2061.066325] lowmem_reserve[]: 0 0 0 0 0 [ 2061.070392] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2061.085243] Node 0 DMA32: 875*4kB (UME) 336*8kB (UME) 560*16kB (UME) 2316*32kB (UME) 4297*64kB (UM) 2123*128kB (U) 744*256kB (U) 355*512kB (UM) 156*1024kB (U) 105*2048kB (UM) 0*4096kB = 1383020kB [ 2061.103530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2061.114338] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2061.132794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2061.141812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2061.150462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2061.159366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2061.168055] 35332 total pagecache pages [ 2061.172024] 0 pages in swap cache [ 2061.175510] Swap cache stats: add 0, delete 0, find 0/0 [ 2061.180910] Free swap = 0kB [ 2061.183915] Total swap = 0kB [ 2061.186991] 2097051 pages RAM 13:07:09 executing program 0 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x5, 0x200}) 13:07:09 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2061.190088] 0 pages HighMem/MovableOnly [ 2061.194095] 363849 pages reserved [ 2061.197583] 0 pages cma reserved [ 2061.301443] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2061.313211] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2061.325211] CPU: 1 PID: 21970 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2061.333103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2061.342432] Call Trace: [ 2061.345102] dump_stack+0x1b2/0x281 [ 2061.348724] warn_alloc.cold+0x96/0x1cc [ 2061.352694] ? zone_watermark_ok_safe+0x220/0x220 [ 2061.357531] ? trace_hardirqs_on+0x10/0x10 [ 2061.361771] ? deref_stack_reg+0x124/0x1a0 [ 2061.366003] ? fs_reclaim_release+0xd0/0x110 [ 2061.370397] __vmalloc_node_range+0x10e/0x150 [ 2061.374897] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2061.380250] vmalloc_user+0x47/0xa0 [ 2061.383859] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2061.388166] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2061.393523] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2061.397691] __vb2_queue_alloc+0x47a/0xd90 [ 2061.401936] vb2_core_create_bufs+0x279/0x5a0 [ 2061.406424] ? __vb2_queue_free+0x7a0/0x7a0 [ 2061.410729] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.416087] ? trace_hardirqs_on+0x10/0x10 [ 2061.420320] vb2_create_bufs+0x2e1/0x5b0 [ 2061.424378] ? vb2_thread_start+0x310/0x310 [ 2061.428723] v4l_create_bufs+0xa4/0x150 [ 2061.432690] __video_do_ioctl+0x65b/0x6a0 [ 2061.436826] ? video_ioctl2+0x30/0x30 [ 2061.440606] ? __might_fault+0x177/0x1b0 [ 2061.444647] ? video_ioctl2+0x30/0x30 [ 2061.448427] video_usercopy+0xfd/0xe70 [ 2061.452310] ? v4l_g_ctrl+0x390/0x390 [ 2061.456104] ? lock_acquire+0x170/0x3f0 [ 2061.460058] ? lock_downgrade+0x740/0x740 [ 2061.464198] ? trace_hardirqs_on+0x10/0x10 [ 2061.468426] ? futex_exit_release+0x220/0x220 [ 2061.472918] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2061.478021] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2061.483032] v4l2_ioctl+0x1bb/0x2f0 [ 2061.486643] ? v4l2_open+0x2f0/0x2f0 [ 2061.490338] do_vfs_ioctl+0x75a/0xff0 [ 2061.494119] ? ioctl_preallocate+0x1a0/0x1a0 [ 2061.498522] ? lock_downgrade+0x740/0x740 [ 2061.502655] ? __fget+0x225/0x360 [ 2061.506106] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.510086] ? security_file_ioctl+0x83/0xb0 [ 2061.514497] SyS_ioctl+0x7f/0xb0 [ 2061.517846] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.521822] do_syscall_64+0x1d5/0x640 [ 2061.525710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.530889] RIP: 0033:0x466459 [ 2061.534089] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2061.541813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 13:07:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 13:07:10 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:10 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:10 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2061.551616] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2061.558895] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2061.566172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2061.573433] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:10 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x5, 0x200}) 13:07:10 executing program 0: semget(0x0, 0x1, 0x109) r0 = semget$private(0x0, 0x1, 0x2) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/20) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x32, 0x8, 0x1, 0x1, 0x0, 0x401, 0x10, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x636, 0x2, @perf_config_ext={0x5, 0x3}, 0x20, 0x8, 0x3, 0x2, 0x5, 0x4, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000180)=""/129) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0xffffffffffffffff, 0x0, r1, 0x5) [ 2061.692983] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2061.730885] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2061.736047] CPU: 1 PID: 21986 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2061.743927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2061.753284] Call Trace: [ 2061.755879] dump_stack+0x1b2/0x281 [ 2061.759512] warn_alloc.cold+0x96/0x1cc [ 2061.763497] ? zone_watermark_ok_safe+0x220/0x220 [ 2061.768370] ? trace_hardirqs_on+0x10/0x10 [ 2061.772613] ? deref_stack_reg+0x124/0x1a0 [ 2061.776856] ? fs_reclaim_release+0xd0/0x110 [ 2061.781278] __vmalloc_node_range+0x10e/0x150 [ 2061.785817] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2061.791188] vmalloc_user+0x47/0xa0 [ 2061.794826] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2061.799143] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2061.804505] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2061.808654] __vb2_queue_alloc+0x47a/0xd90 [ 2061.812898] vb2_core_create_bufs+0x279/0x5a0 [ 2061.817387] ? __vb2_queue_free+0x7a0/0x7a0 [ 2061.821729] ? futex_wait+0x42f/0x5a0 [ 2061.825541] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.830901] ? trace_hardirqs_on+0x10/0x10 [ 2061.835134] vb2_create_bufs+0x2e1/0x5b0 [ 2061.839195] ? vb2_thread_start+0x310/0x310 13:07:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) [ 2061.843537] ? futex_wait+0x42f/0x5a0 [ 2061.847340] v4l_create_bufs+0xa4/0x150 [ 2061.851316] __video_do_ioctl+0x65b/0x6a0 [ 2061.855470] ? video_ioctl2+0x30/0x30 [ 2061.859269] ? __might_fault+0x177/0x1b0 [ 2061.863353] ? video_ioctl2+0x30/0x30 [ 2061.867155] video_usercopy+0xfd/0xe70 [ 2061.872286] ? v4l_g_ctrl+0x390/0x390 [ 2061.876085] ? lock_acquire+0x170/0x3f0 [ 2061.880060] ? lock_downgrade+0x740/0x740 [ 2061.884209] ? trace_hardirqs_on+0x10/0x10 [ 2061.888450] ? futex_exit_release+0x220/0x220 13:07:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x3}, {0x0, 0x4}, {0x2}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4840) 13:07:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, r1, 0xa1fbaf713ea754d3, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004050}, 0x60) [ 2061.892950] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2061.898055] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2061.903070] v4l2_ioctl+0x1bb/0x2f0 [ 2061.906690] ? v4l2_open+0x2f0/0x2f0 [ 2061.910403] do_vfs_ioctl+0x75a/0xff0 [ 2061.914211] ? ioctl_preallocate+0x1a0/0x1a0 [ 2061.918621] ? lock_downgrade+0x740/0x740 [ 2061.922780] ? __fget+0x225/0x360 [ 2061.926237] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.930210] ? security_file_ioctl+0x83/0xb0 [ 2061.934624] SyS_ioctl+0x7f/0xb0 [ 2061.937993] ? do_vfs_ioctl+0xff0/0xff0 [ 2061.941972] do_syscall_64+0x1d5/0x640 [ 2061.945871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2061.951051] RIP: 0033:0x466459 [ 2061.954230] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2061.961973] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2061.969248] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2061.976517] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2061.983787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 13:07:10 executing program 0: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x320, 0x20, 0x320, 0x960, 0x8, 0xfffffffd, 0x10, 0x0, {0x4, 0xb9, 0x8}, {0x2, 0x9, 0x1}, {0x4, 0x4}, {0xa2, 0xfffff001, 0x1}, 0x3, 0x80, 0xfffffff8, 0xffffffff, 0x0, 0x7, 0x0, 0xc7e, 0x7, 0x7, 0x6, 0x6, 0x0, 0x0, 0x2, 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x500, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 2061.991058] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, r0, 0x5) [ 2062.036022] warn_alloc_show_mem: 1 callbacks suppressed [ 2062.036027] Mem-Info: [ 2062.044571] active_anon:86727 inactive_anon:27052 isolated_anon:0 [ 2062.044571] active_file:2220 inactive_file:8641 isolated_file:0 [ 2062.044571] unevictable:0 dirty:220 writeback:0 unstable:0 [ 2062.044571] slab_reclaimable:14504 slab_unreclaimable:127795 [ 2062.044571] mapped:59176 shmem:27412 pagetables:6903 bounce:0 [ 2062.044571] free:1355232 free_pcp:333 free_cma:0 [ 2062.079367] Node 0 active_anon:346472kB inactive_anon:59440kB active_file:4824kB inactive_file:32372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232452kB dirty:844kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2062.134024] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2062.161878] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.188654] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2062.193805] Node 0 DMA32 free:1432020kB min:36200kB low:45248kB high:54296kB active_anon:346440kB inactive_anon:59440kB active_file:4824kB inactive_file:32372kB unevictable:0kB writepending:848kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15744kB pagetables:27564kB bounce:0kB free_pcp:1344kB local_pcp:680kB free_cma:0kB [ 2062.224432] lowmem_reserve[]: 0 0 0 0 0 [ 2062.228845] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.254495] lowmem_reserve[]: 0 0 0 0 0 [ 2062.258569] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2062.287323] lowmem_reserve[]: 0 0 0 0 0 [ 2062.291326] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2062.306174] Node 0 DMA32: 1182*4kB (UME) 2570*8kB (UME) 2647*16kB (UME) 2320*32kB (UME) 4291*64kB (UM) 2126*128kB (UM) 747*256kB (UM) 354*512kB (U) 156*1024kB (U) 103*2048kB (UM) 0*4096kB = 1431800kB [ 2062.324248] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2062.335050] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2062.353453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2062.362359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.371002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:11 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}}, 0x800) 13:07:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x0, 0x5, 0x200}) 13:07:11 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2062.379908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2062.388547] 35341 total pagecache pages [ 2062.392526] 0 pages in swap cache [ 2062.395973] Swap cache stats: add 0, delete 0, find 0/0 [ 2062.401410] Free swap = 0kB [ 2062.404439] Total swap = 0kB [ 2062.407508] 2097051 pages RAM [ 2062.410602] 0 pages HighMem/MovableOnly [ 2062.414557] 363849 pages reserved [ 2062.418090] 0 pages cma reserved 13:07:11 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2062.483542] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2062.512784] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2062.528755] CPU: 0 PID: 22031 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2062.536713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2062.546075] Call Trace: [ 2062.548667] dump_stack+0x1b2/0x281 [ 2062.552307] warn_alloc.cold+0x96/0x1cc [ 2062.556307] ? zone_watermark_ok_safe+0x220/0x220 [ 2062.561147] ? trace_hardirqs_on+0x10/0x10 [ 2062.565385] ? deref_stack_reg+0x124/0x1a0 [ 2062.569625] ? fs_reclaim_release+0xd0/0x110 [ 2062.574046] __vmalloc_node_range+0x10e/0x150 [ 2062.578550] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2062.583909] vmalloc_user+0x47/0xa0 [ 2062.587536] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2062.591943] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2062.597303] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2062.601453] __vb2_queue_alloc+0x47a/0xd90 [ 2062.605719] vb2_core_create_bufs+0x279/0x5a0 [ 2062.610206] ? __vb2_queue_free+0x7a0/0x7a0 [ 2062.614520] ? futex_wait+0x42f/0x5a0 [ 2062.618311] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2062.623710] ? trace_hardirqs_on+0x10/0x10 [ 2062.627937] vb2_create_bufs+0x2e1/0x5b0 [ 2062.631990] ? vb2_thread_start+0x310/0x310 [ 2062.636293] ? futex_wait+0x42f/0x5a0 [ 2062.640082] v4l_create_bufs+0xa4/0x150 [ 2062.644051] __video_do_ioctl+0x65b/0x6a0 [ 2062.648193] ? video_ioctl2+0x30/0x30 [ 2062.652001] ? __might_fault+0x177/0x1b0 [ 2062.656042] ? video_ioctl2+0x30/0x30 [ 2062.659824] video_usercopy+0xfd/0xe70 [ 2062.663705] ? v4l_g_ctrl+0x390/0x390 [ 2062.667497] ? lock_acquire+0x170/0x3f0 [ 2062.671462] ? lock_downgrade+0x740/0x740 [ 2062.675604] ? trace_hardirqs_on+0x10/0x10 [ 2062.679869] ? futex_exit_release+0x220/0x220 [ 2062.684347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2062.689442] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2062.694452] v4l2_ioctl+0x1bb/0x2f0 [ 2062.698066] ? v4l2_open+0x2f0/0x2f0 [ 2062.701786] do_vfs_ioctl+0x75a/0xff0 [ 2062.705589] ? ioctl_preallocate+0x1a0/0x1a0 [ 2062.709978] ? lock_downgrade+0x740/0x740 [ 2062.714106] ? __fget+0x225/0x360 [ 2062.717544] ? do_vfs_ioctl+0xff0/0xff0 [ 2062.721506] ? security_file_ioctl+0x83/0xb0 [ 2062.725894] SyS_ioctl+0x7f/0xb0 [ 2062.729239] ? do_vfs_ioctl+0xff0/0xff0 13:07:11 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80040, 0x0) [ 2062.733195] do_syscall_64+0x1d5/0x640 [ 2062.737076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2062.742259] RIP: 0033:0x466459 [ 2062.745434] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2062.753120] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2062.760408] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2062.767664] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2062.774928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 13:07:11 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:11 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x0, 0x200}) [ 2062.782181] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 13:07:11 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2062.881126] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2062.903376] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2062.920714] CPU: 0 PID: 22063 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2062.928629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2062.937978] Call Trace: [ 2062.940570] dump_stack+0x1b2/0x281 [ 2062.944201] warn_alloc.cold+0x96/0x1cc [ 2062.948179] ? zone_watermark_ok_safe+0x220/0x220 [ 2062.953020] ? retint_kernel+0x2d/0x2d [ 2062.956934] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2062.961961] __vmalloc_node_range+0x10e/0x150 [ 2062.966536] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2062.971902] vmalloc_user+0x47/0xa0 [ 2062.975531] ? vb2_vmalloc_alloc+0xa6/0x2d0 13:07:11 executing program 0: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x20, 0x7ff, 0xffffffff, 0xdce, 0xa0, 0x400000001000, 0x32dd, 0x6}, &(0x7f00000002c0)={0x5, 0x901, 0x0, 0x5, 0x2, 0x20, 0x7, 0x7}, &(0x7f0000000300)={0x214, 0x10001, 0x4000000000000000, 0x80, 0x9, 0x3, 0xffffffff, 0x4}, &(0x7f0000000380)={r0, r1+60000000}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) pselect6(0x40, &(0x7f0000000440)={0x401, 0x4, 0x5, 0x4, 0x1, 0x1ff, 0x6, 0x3f}, &(0x7f0000000480)={0x7ff, 0x9, 0xffffffffffffff79, 0x6, 0x7fff, 0x7ff, 0xfffffffffffff748, 0x2}, &(0x7f00000004c0)={0xffff, 0xfffffffff3f104e1, 0x6, 0x1000, 0x7, 0x1c, 0x2, 0x9}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x576]}, 0x8}) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r3 = getpid() r4 = getpgid(r3) semtimedop(0x0, &(0x7f0000000200)=[{0x2, 0x6ad0, 0x800}, {0x0, 0x3}, {0x1, 0x1, 0xb5498395c3a232a8}, {0x2, 0x0, 0x800}, {0x0, 0x3, 0x800}], 0x5, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0x1, 0x7, 0x5, 0x0, 0x7, 0x4280, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x1, 0x7, 0x9, 0x3, 0x8, 0xfffeffff, 0xb13}, r4, 0x8, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xc9, 0x2, 0xd1, 0x8a, 0x0, 0x1, 0x10, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x34d, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x18510, 0x4, 0x401, 0x2, 0x7fff, 0x7, 0x4}, r3, 0x8, r2, 0x18) getpid() [ 2062.979852] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2062.984004] __vb2_queue_alloc+0x47a/0xd90 [ 2062.988251] vb2_core_create_bufs+0x279/0x5a0 [ 2062.992745] ? __vb2_queue_free+0x7a0/0x7a0 [ 2062.997072] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2063.002436] ? trace_hardirqs_on+0x10/0x10 [ 2063.006676] vb2_create_bufs+0x2e1/0x5b0 [ 2063.010745] ? vb2_thread_start+0x310/0x310 [ 2063.015076] v4l_create_bufs+0xa4/0x150 [ 2063.019054] __video_do_ioctl+0x65b/0x6a0 [ 2063.023213] ? video_ioctl2+0x30/0x30 [ 2063.027014] ? __might_fault+0x177/0x1b0 13:07:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1409, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0xde0932ef8d063878) [ 2063.031077] ? video_ioctl2+0x30/0x30 [ 2063.034882] video_usercopy+0xfd/0xe70 [ 2063.038782] ? v4l_g_ctrl+0x390/0x390 [ 2063.042577] ? lock_acquire+0x170/0x3f0 [ 2063.046548] ? lock_downgrade+0x740/0x740 [ 2063.050698] ? trace_hardirqs_on+0x10/0x10 [ 2063.054939] ? futex_exit_release+0x220/0x220 [ 2063.059435] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2063.064538] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2063.069557] v4l2_ioctl+0x1bb/0x2f0 [ 2063.073181] ? v4l2_open+0x2f0/0x2f0 [ 2063.076898] do_vfs_ioctl+0x75a/0xff0 13:07:11 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) [ 2063.080699] ? ioctl_preallocate+0x1a0/0x1a0 [ 2063.085109] ? lock_downgrade+0x740/0x740 [ 2063.089256] ? __fget+0x225/0x360 [ 2063.092711] ? do_vfs_ioctl+0xff0/0xff0 [ 2063.096688] ? security_file_ioctl+0x83/0xb0 [ 2063.101101] SyS_ioctl+0x7f/0xb0 [ 2063.104465] ? do_vfs_ioctl+0xff0/0xff0 [ 2063.108441] do_syscall_64+0x1d5/0x640 [ 2063.112331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2063.117515] RIP: 0033:0x466459 [ 2063.120700] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2063.128402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2063.135668] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2063.142936] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2063.150203] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2063.157645] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2063.167876] warn_alloc_show_mem: 1 callbacks suppressed [ 2063.167880] Mem-Info: [ 2063.175910] active_anon:86710 inactive_anon:27052 isolated_anon:0 13:07:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000003080)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x20, 0x34325258, 0x3, @discrete={0x81, 0x365}}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 2063.175910] active_file:2220 inactive_file:8653 isolated_file:0 [ 2063.175910] unevictable:0 dirty:233 writeback:0 unstable:0 [ 2063.175910] slab_reclaimable:14501 slab_unreclaimable:127876 [ 2063.175910] mapped:59222 shmem:27412 pagetables:6913 bounce:0 [ 2063.175910] free:1355104 free_pcp:255 free_cma:0 [ 2063.222386] Node 0 active_anon:346504kB inactive_anon:59440kB active_file:4824kB inactive_file:32404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232520kB dirty:880kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2063.269739] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2063.297990] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2063.325572] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2063.331426] Node 0 DMA32 free:1429880kB min:36200kB low:45248kB high:54296kB active_anon:348588kB inactive_anon:59440kB active_file:4824kB inactive_file:32404kB unevictable:0kB writepending:884kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15744kB pagetables:27588kB bounce:0kB free_pcp:1204kB local_pcp:708kB free_cma:0kB [ 2063.362326] lowmem_reserve[]: 0 0 0 0 0 [ 2063.366324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2063.392811] lowmem_reserve[]: 0 0 0 0 0 [ 2063.396796] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2063.426288] lowmem_reserve[]: 0 0 0 0 0 [ 2063.430785] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2063.446062] Node 0 DMA32: 1052*4kB (UME) 1752*8kB (UME) 2957*16kB (UME) 2338*32kB (UE) 4285*64kB (UM) 2129*128kB (U) 752*256kB (UM) 354*512kB (U) 156*1024kB (U) 102*2048kB (U) 0*4096kB = 1429504kB [ 2063.464688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2063.475863] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2063.494724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2063.503974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2063.513068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2063.522468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:12 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 13:07:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2, 0x0, 0x200}) [ 2063.531534] 35350 total pagecache pages [ 2063.535506] 0 pages in swap cache [ 2063.539838] Swap cache stats: add 0, delete 0, find 0/0 [ 2063.545195] Free swap = 0kB [ 2063.548897] Total swap = 0kB [ 2063.551908] 2097051 pages RAM [ 2063.555034] 0 pages HighMem/MovableOnly [ 2063.560604] 363849 pages reserved [ 2063.564059] 0 pages cma reserved 13:07:12 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xe000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000340)={{&(0x7f00000002c0)={'GENERAL\x00', {&(0x7f0000000180)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingTimerNs\x00'}, {0x1}, {&(0x7f0000000040)=@adf_str={@normal='NumberDcInstances\x00', {"6167a4fd31cfba768036c522a35513b90d4b030e8fffffdbc206312f9ccc310c5b5135bce758eed81f5dc4158738f7598770932bdb08745447d0a22a87f6d350"}}}}}, {&(0x7f0000000240)={'GENERAL\x00'}}}}, 0x8}) 13:07:12 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfc, 0x4, 0x6, 0x49, 0x0, 0x8, 0x2cf80, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x40000, 0xfffffffffffffffe, 0x1, 0x2, 0x8ab3, 0xf094}, 0x0, 0xf, r0, 0x0) 13:07:12 executing program 0: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x20, 0x9, 0x79, 0x0, 0x1f, 0x20, 0x1f, 0xa6, "bcb125ed830efa14bfd51fca7610058a1afac2a1245402bfb2094e556e851ff4"}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) 13:07:12 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:12 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:12 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:12 executing program 0: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0x1e, 0x1000, &(0x7f00000000c0)="1fe527a45f20bd39643be937b1a3d1dfb7e2b0aba033aa0469188011e641", &(0x7f0000000180)=""/4096, 0x5, 0x0, 0xd8, 0xad, &(0x7f0000001180)="9b3c049c4fc9d025d536553b720e58ae1cdad4e319b9018e40daeb048ca84e8418440dd83d42c7e7ae8a8103d86a9d50d33d226283ce895314785257c23997ab8525c12038a53c88e888b46d9b5e3a095c6eacb184714e38d72c2cc97f1b9684608f5c539f13ef4afc384c1f65295da635b6e753ddfb187007b4c5e1aab07b4711deadf060969c85a23c61979d70504291be94b6b24bce880c371eab0657976bf832f84449c03934f17c1e7ab31dc71983eb2f70b9310ee1afdfa90b000eb82354d50765311ecb8b3778b3e0e4d045db37e138e0c9646677", &(0x7f0000001280)="96c4e97426aee3ec1a834316c3edbd853d1d7c8b4aa8b9a87c4bf7eaefe6575ef84af8f2dee41d4ad29b20f630ff06fab1aa3022bdc8188d0be2b54160f2059498bb027b142a8372ec82814f2fcd441277247aeb93a273f8bc1712df9d7dadd3c93b1de7d42e5f28f2a7e607184af277f657dea61e26e6bd9d7beb21aa628d079845a936eb0679d1457d7f6c40f13d402e5ed3fdd749b72199930f7eb091262a0d5c7bac9400e11c375e4c4b7a", 0x1}, 0x48) accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) 13:07:12 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x20, 0x43, 0x8, 0x70bd25, 0x25dfdbfc, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x102000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040045) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x0, 0x0) 13:07:12 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:12 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:12 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2063.960683] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2064.028737] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2064.047517] CPU: 0 PID: 22143 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2064.055423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.064776] Call Trace: [ 2064.067367] dump_stack+0x1b2/0x281 [ 2064.070996] warn_alloc.cold+0x96/0x1cc 13:07:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000280), &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x7, 0x2000000, 0x0, {{0x9, 0x4, 0x0, 0x21, 0x24, 0x68, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x10, 0xf9, 0x0, 0x6, [0x5, 0x4, 0x2]}]}}}}}) getgroups(0x3, &(0x7f00000000c0)=[0xee00, 0xee00, r0]) [ 2064.074969] ? zone_watermark_ok_safe+0x220/0x220 [ 2064.080070] ? trace_hardirqs_on+0x10/0x10 [ 2064.084304] ? deref_stack_reg+0x124/0x1a0 [ 2064.088567] ? fs_reclaim_release+0xd0/0x110 [ 2064.092978] __vmalloc_node_range+0x10e/0x150 [ 2064.097477] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2064.102842] vmalloc_user+0x47/0xa0 [ 2064.106492] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2064.110809] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2064.116182] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2064.120343] __vb2_queue_alloc+0x47a/0xd90 [ 2064.124609] vb2_core_create_bufs+0x279/0x5a0 13:07:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000005c0)={'syzkaller1\x00'}) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x1f, 0x2, 0x0, 0x1, 0x0, 0x1000, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xed, 0x6}, 0x8002, 0x7f, 0x10001, 0x8, 0xd1f, 0x4, 0x100}, 0x0, 0x1, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7f, 0x5, 0x37, 0x81, 0x0, 0x0, 0x10230, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5, @perf_config_ext={0x6, 0x702}, 0x8000, 0xadeb, 0x7ff, 0x5, 0x1ff, 0x9, 0x8000}, 0x0, 0xa, r1, 0x3) [ 2064.129105] ? __vb2_queue_free+0x7a0/0x7a0 [ 2064.133427] ? futex_wait+0x42f/0x5a0 [ 2064.137228] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2064.142597] ? trace_hardirqs_on+0x10/0x10 [ 2064.146843] vb2_create_bufs+0x2e1/0x5b0 [ 2064.150917] ? vb2_thread_start+0x310/0x310 [ 2064.155243] ? futex_wait+0x42f/0x5a0 [ 2064.159057] v4l_create_bufs+0xa4/0x150 [ 2064.163038] __video_do_ioctl+0x65b/0x6a0 [ 2064.167191] ? video_ioctl2+0x30/0x30 [ 2064.170990] ? __might_fault+0x177/0x1b0 [ 2064.175047] ? video_ioctl2+0x30/0x30 [ 2064.178848] video_usercopy+0xfd/0xe70 [ 2064.182744] ? v4l_g_ctrl+0x390/0x390 [ 2064.186546] ? lock_acquire+0x170/0x3f0 [ 2064.190557] ? lock_downgrade+0x740/0x740 [ 2064.194713] ? trace_hardirqs_on+0x10/0x10 [ 2064.198956] ? futex_exit_release+0x220/0x220 [ 2064.203458] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2064.208564] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2064.213581] v4l2_ioctl+0x1bb/0x2f0 [ 2064.217208] ? v4l2_open+0x2f0/0x2f0 [ 2064.220920] do_vfs_ioctl+0x75a/0xff0 [ 2064.224753] ? ioctl_preallocate+0x1a0/0x1a0 13:07:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) [ 2064.229208] ? lock_downgrade+0x740/0x740 [ 2064.233355] ? __fget+0x225/0x360 [ 2064.236808] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.240783] ? security_file_ioctl+0x83/0xb0 [ 2064.245192] SyS_ioctl+0x7f/0xb0 [ 2064.248557] ? do_vfs_ioctl+0xff0/0xff0 [ 2064.252534] do_syscall_64+0x1d5/0x640 [ 2064.256427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2064.261612] RIP: 0033:0x466459 [ 2064.264795] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2064.272504] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2064.279773] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2064.287040] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2064.294308] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2064.301571] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2064.365393] Mem-Info: [ 2064.372008] active_anon:86733 inactive_anon:27052 isolated_anon:0 [ 2064.372008] active_file:2220 inactive_file:8660 isolated_file:0 [ 2064.372008] unevictable:0 dirty:240 writeback:0 unstable:0 [ 2064.372008] slab_reclaimable:14501 slab_unreclaimable:128250 [ 2064.372008] mapped:59220 shmem:27412 pagetables:6930 bounce:0 [ 2064.372008] free:1354849 free_pcp:300 free_cma:0 [ 2064.413486] Node 0 active_anon:346540kB inactive_anon:59440kB active_file:4824kB inactive_file:32432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232876kB dirty:908kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2064.442843] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4404kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2064.471929] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.499192] lowmem_reserve[]: 0 2717 2718 2718 2718 13:07:13 executing program 0: semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/4089) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000001100)=0xe8) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001140)={{0x1, 0xee00, 0xee00, r0, 0x0, 0x26, 0x400}, 0x6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}) 13:07:13 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x5, 0x1f, 0x3f, 0x3f, 0xd8, 0x14, 0x1, 0x80, "88b3b77a27295a1a1fc3e88c62b34457d2acbb4f385a9dcdad0169cb6bd038c7"}) r0 = socket(0x23, 0x2, 0xf7c) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x30, 0x140a, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x40800) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2064.504306] Node 0 DMA32 free:1431376kB min:36200kB low:45248kB high:54296kB active_anon:346540kB inactive_anon:59440kB active_file:4824kB inactive_file:32432kB unevictable:0kB writepending:908kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27572kB bounce:0kB free_pcp:1260kB local_pcp:544kB free_cma:0kB [ 2064.537014] lowmem_reserve[]: 0 0 0 0 0 [ 2064.545504] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.572609] lowmem_reserve[]: 0 0 0 0 0 [ 2064.576677] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2064.622925] lowmem_reserve[]: 0 0 0 0 0 [ 2064.627220] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2064.643515] Node 0 DMA32: 1314*4kB (UME) 2181*8kB (UME) 2621*16kB (UE) 2355*32kB (UME) 4279*64kB (U) 2134*128kB (UM) 753*256kB (U) 354*512kB (U) 156*1024kB (U) 102*2048kB (U) 0*4096kB = 1429664kB [ 2064.662272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2064.674005] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2064.693898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2064.710271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:13 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x5}) 13:07:13 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:13 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 13:07:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:13 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2064.718982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2064.728650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2064.737589] 35360 total pagecache pages [ 2064.741689] 0 pages in swap cache [ 2064.745210] Swap cache stats: add 0, delete 0, find 0/0 [ 2064.750717] Free swap = 0kB [ 2064.753754] Total swap = 0kB [ 2064.756790] 2097051 pages RAM [ 2064.760916] 0 pages HighMem/MovableOnly [ 2064.764910] 363849 pages reserved [ 2064.768870] 0 pages cma reserved 13:07:13 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}, 0xd04, 0x0, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x40000000000, r0, 0x5) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x9, 0x81, 0x80, 0x9, 0x0, 0x1, 0x8101c, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7e5, 0x4, @perf_bp={&(0x7f0000000180), 0xd}, 0x214, 0xb55, 0x3, 0x5, 0x4, 0x9, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x4, 0x7) r1 = socket(0x3, 0x3, 0x7) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040000) 13:07:13 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2064.857728] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2064.897678] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2064.910175] CPU: 1 PID: 22214 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2064.918073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2064.927432] Call Trace: [ 2064.930042] dump_stack+0x1b2/0x281 [ 2064.933688] warn_alloc.cold+0x96/0x1cc [ 2064.937676] ? zone_watermark_ok_safe+0x220/0x220 [ 2064.942522] ? trace_hardirqs_on+0x10/0x10 [ 2064.946803] ? deref_stack_reg+0x124/0x1a0 [ 2064.951042] ? fs_reclaim_release+0xd0/0x110 [ 2064.955457] __vmalloc_node_range+0x10e/0x150 [ 2064.959965] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2064.965333] vmalloc_user+0x47/0xa0 [ 2064.969079] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2064.973402] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2064.978774] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2064.982926] __vb2_queue_alloc+0x47a/0xd90 [ 2064.987158] vb2_core_create_bufs+0x279/0x5a0 [ 2064.991633] ? __vb2_queue_free+0x7a0/0x7a0 [ 2064.995938] ? futex_wait+0x42f/0x5a0 [ 2064.999847] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.005254] ? trace_hardirqs_on+0x10/0x10 [ 2065.009479] vb2_create_bufs+0x2e1/0x5b0 [ 2065.013525] ? vb2_thread_start+0x310/0x310 [ 2065.017852] ? futex_wait+0x42f/0x5a0 [ 2065.021638] v4l_create_bufs+0xa4/0x150 [ 2065.025603] __video_do_ioctl+0x65b/0x6a0 [ 2065.029745] ? video_ioctl2+0x30/0x30 [ 2065.033538] ? __might_fault+0x177/0x1b0 [ 2065.037586] ? video_ioctl2+0x30/0x30 [ 2065.041368] video_usercopy+0xfd/0xe70 [ 2065.045239] ? v4l_g_ctrl+0x390/0x390 [ 2065.049027] ? lock_acquire+0x170/0x3f0 [ 2065.052987] ? lock_downgrade+0x740/0x740 [ 2065.057123] ? trace_hardirqs_on+0x10/0x10 [ 2065.061337] ? futex_exit_release+0x220/0x220 [ 2065.065815] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2065.070902] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2065.075900] v4l2_ioctl+0x1bb/0x2f0 [ 2065.079504] ? v4l2_open+0x2f0/0x2f0 [ 2065.083198] do_vfs_ioctl+0x75a/0xff0 [ 2065.086978] ? ioctl_preallocate+0x1a0/0x1a0 [ 2065.091369] ? lock_downgrade+0x740/0x740 [ 2065.095519] ? __fget+0x225/0x360 [ 2065.098955] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.102911] ? security_file_ioctl+0x83/0xb0 [ 2065.107298] SyS_ioctl+0x7f/0xb0 13:07:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2065.110644] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.114609] do_syscall_64+0x1d5/0x640 [ 2065.118488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.123663] RIP: 0033:0x466459 [ 2065.126851] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2065.134558] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2065.141928] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2065.149201] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 13:07:13 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:13 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2065.156505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2065.163762] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:13 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:13 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:14 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty, 0x2bb3, 0x1}, 0xffffffcc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={@private0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1406, 0x100, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x4, 0x7, 0x9, 0x200, 0x0, @mcast1, @local, 0x10, 0x7800, 0x80000001, 0x3}}) 13:07:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:14 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:14 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2065.327353] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2065.356617] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2065.377980] CPU: 1 PID: 22251 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2065.385898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2065.395257] Call Trace: [ 2065.397851] dump_stack+0x1b2/0x281 [ 2065.401484] warn_alloc.cold+0x96/0x1cc [ 2065.405464] ? zone_watermark_ok_safe+0x220/0x220 [ 2065.410307] ? trace_hardirqs_on+0x10/0x10 [ 2065.414540] ? deref_stack_reg+0x124/0x1a0 [ 2065.418779] ? fs_reclaim_release+0xd0/0x110 [ 2065.423193] __vmalloc_node_range+0x10e/0x150 [ 2065.427701] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2065.433154] vmalloc_user+0x47/0xa0 [ 2065.436783] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2065.441107] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2065.446471] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2065.450624] __vb2_queue_alloc+0x47a/0xd90 [ 2065.454869] vb2_core_create_bufs+0x279/0x5a0 [ 2065.459365] ? __vb2_queue_free+0x7a0/0x7a0 [ 2065.463726] ? lock_acquire+0x170/0x3f0 [ 2065.467704] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.473069] ? trace_hardirqs_on+0x10/0x10 13:07:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) read$dsp(r0, &(0x7f0000000280)=""/209, 0xd1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={[], [], @private=0xa010100}, 0x1f, 0x4}, 0x20) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x4}, 0x20) 13:07:14 executing program 0: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfffffffffffffffe}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2065.477309] vb2_create_bufs+0x2e1/0x5b0 [ 2065.481373] ? vb2_thread_start+0x310/0x310 [ 2065.485708] ? lock_acquire+0x170/0x3f0 [ 2065.489692] v4l_create_bufs+0xa4/0x150 [ 2065.493669] __video_do_ioctl+0x65b/0x6a0 [ 2065.497831] ? video_ioctl2+0x30/0x30 [ 2065.501632] ? __might_fault+0x177/0x1b0 [ 2065.505698] ? video_ioctl2+0x30/0x30 [ 2065.509498] video_usercopy+0xfd/0xe70 [ 2065.513420] ? v4l_g_ctrl+0x390/0x390 [ 2065.517218] ? lock_acquire+0x170/0x3f0 [ 2065.521198] ? lock_downgrade+0x740/0x740 13:07:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@remote, 0x77}) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@ipv4}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x5424, 0xffffff81, 0x7ef5, 0xe20, 0x1, 0x7, [], 0x0, r0, 0x0, 0x5, 0x5}, 0x40) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x50434, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2065.525349] ? trace_hardirqs_on+0x10/0x10 [ 2065.529588] ? futex_exit_release+0x220/0x220 [ 2065.534085] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2065.539190] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2065.544211] v4l2_ioctl+0x1bb/0x2f0 [ 2065.547836] ? v4l2_open+0x2f0/0x2f0 [ 2065.551563] do_vfs_ioctl+0x75a/0xff0 [ 2065.555369] ? ioctl_preallocate+0x1a0/0x1a0 [ 2065.559775] ? lock_downgrade+0x740/0x740 [ 2065.563939] ? __fget+0x225/0x360 [ 2065.567402] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.571382] ? security_file_ioctl+0x83/0xb0 [ 2065.575796] SyS_ioctl+0x7f/0xb0 [ 2065.579164] ? do_vfs_ioctl+0xff0/0xff0 [ 2065.583164] do_syscall_64+0x1d5/0x640 [ 2065.587060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2065.592249] RIP: 0033:0x466459 [ 2065.595437] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2065.603175] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2065.610470] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2065.610476] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2065.610482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2065.610488] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 [ 2065.641126] warn_alloc_show_mem: 1 callbacks suppressed [ 2065.641131] Mem-Info: [ 2065.650629] active_anon:87272 inactive_anon:27052 isolated_anon:0 [ 2065.650629] active_file:2220 inactive_file:8671 isolated_file:0 [ 2065.650629] unevictable:0 dirty:251 writeback:0 unstable:0 [ 2065.650629] slab_reclaimable:14500 slab_unreclaimable:128379 [ 2065.650629] mapped:59284 shmem:27412 pagetables:6923 bounce:0 [ 2065.650629] free:1340628 free_pcp:208 free_cma:0 [ 2065.686827] Node 0 active_anon:346452kB inactive_anon:59440kB active_file:4824kB inactive_file:32476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232648kB dirty:952kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2065.715960] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4240kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2065.744660] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.771622] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2065.776740] Node 0 DMA32 free:1378160kB min:36200kB low:45248kB high:54296kB active_anon:346440kB inactive_anon:59440kB active_file:4824kB inactive_file:32476kB unevictable:0kB writepending:956kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27544kB bounce:0kB free_pcp:1108kB local_pcp:460kB free_cma:0kB [ 2065.808403] lowmem_reserve[]: 0 0 0 0 0 [ 2065.812579] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.838946] lowmem_reserve[]: 0 0 0 0 0 [ 2065.842935] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2065.871665] lowmem_reserve[]: 0 0 0 0 0 [ 2065.875663] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2065.890584] Node 0 DMA32: 1031*4kB (UME) 543*8kB (UME) 97*16kB (UME) 2352*32kB (UME) 4265*64kB (U) 2134*128kB (UM) 756*256kB (U) 354*512kB (U) 155*1024kB (U) 104*2048kB (UM) 0*4096kB = 1377892kB [ 2065.908411] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2065.919261] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2065.937664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2065.946499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2065.955160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2065.964056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2065.972706] 35372 total pagecache pages [ 2065.976675] 0 pages in swap cache [ 2065.980177] Swap cache stats: add 0, delete 0, find 0/0 [ 2065.985542] Free swap = 0kB [ 2065.988595] Total swap = 0kB [ 2065.991630] 2097051 pages RAM [ 2065.994761] 0 pages HighMem/MovableOnly [ 2065.998791] 363849 pages reserved [ 2066.002237] 0 pages cma reserved 13:07:14 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = semget(0x2, 0x4, 0xc0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000080)=0x27) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x3) 13:07:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:14 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:14 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2066.128268] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2066.150261] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2066.159838] CPU: 0 PID: 22301 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2066.167729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.177078] Call Trace: [ 2066.179665] dump_stack+0x1b2/0x281 [ 2066.183331] warn_alloc.cold+0x96/0x1cc [ 2066.187345] ? zone_watermark_ok_safe+0x220/0x220 [ 2066.192206] ? trace_hardirqs_on+0x10/0x10 [ 2066.196435] ? deref_stack_reg+0x124/0x1a0 [ 2066.200666] ? fs_reclaim_release+0xd0/0x110 [ 2066.205080] __vmalloc_node_range+0x10e/0x150 [ 2066.209660] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2066.215011] vmalloc_user+0x47/0xa0 [ 2066.218629] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2066.222964] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2066.228495] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2066.232627] __vb2_queue_alloc+0x47a/0xd90 [ 2066.236846] vb2_core_create_bufs+0x279/0x5a0 [ 2066.241333] ? __vb2_queue_free+0x7a0/0x7a0 [ 2066.245636] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.251002] ? trace_hardirqs_on+0x10/0x10 [ 2066.255221] vb2_create_bufs+0x2e1/0x5b0 [ 2066.259270] ? vb2_thread_start+0x310/0x310 [ 2066.263586] v4l_create_bufs+0xa4/0x150 [ 2066.267540] __video_do_ioctl+0x65b/0x6a0 [ 2066.271670] ? video_ioctl2+0x30/0x30 [ 2066.275450] ? __might_fault+0x177/0x1b0 [ 2066.279490] ? video_ioctl2+0x30/0x30 [ 2066.283279] video_usercopy+0xfd/0xe70 [ 2066.287159] ? v4l_g_ctrl+0x390/0x390 [ 2066.290946] ? lock_acquire+0x170/0x3f0 [ 2066.294905] ? lock_downgrade+0x740/0x740 [ 2066.299161] ? trace_hardirqs_on+0x10/0x10 [ 2066.303384] ? futex_exit_release+0x220/0x220 [ 2066.307895] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2066.312989] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2066.318006] v4l2_ioctl+0x1bb/0x2f0 [ 2066.321624] ? v4l2_open+0x2f0/0x2f0 [ 2066.325321] do_vfs_ioctl+0x75a/0xff0 [ 2066.329117] ? ioctl_preallocate+0x1a0/0x1a0 [ 2066.333522] ? lock_downgrade+0x740/0x740 [ 2066.337677] ? __fget+0x225/0x360 [ 2066.341108] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.345065] ? security_file_ioctl+0x83/0xb0 [ 2066.349450] SyS_ioctl+0x7f/0xb0 [ 2066.352812] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.356767] do_syscall_64+0x1d5/0x640 [ 2066.360638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.365820] RIP: 0033:0x466459 [ 2066.368989] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:07:15 executing program 0: ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:15 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:15 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:15 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) [ 2066.376678] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2066.383932] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2066.391198] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2066.398449] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2066.405698] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:15 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5, 0x4) 13:07:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2066.532095] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2066.554968] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2066.584161] CPU: 0 PID: 22320 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2066.592102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2066.601457] Call Trace: [ 2066.604048] dump_stack+0x1b2/0x281 [ 2066.607680] warn_alloc.cold+0x96/0x1cc [ 2066.611653] ? zone_watermark_ok_safe+0x220/0x220 [ 2066.616496] ? trace_hardirqs_on+0x10/0x10 [ 2066.620733] ? deref_stack_reg+0x124/0x1a0 [ 2066.624975] ? fs_reclaim_release+0xd0/0x110 [ 2066.629390] __vmalloc_node_range+0x10e/0x150 13:07:15 executing program 0: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x1ff, {{0xa, 0x4e23, 0x2, @empty, 0xffffff0e}}}, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000020000000c000600030000000000000008000300", @ANYRES32=r6, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080003003ca057672f31f6487cfc6148714c82e02196280c0a7c1c57a4793e5e0368fb85f0c72c75a130d7b9ea8560111bb78b02b32a72e33c2f8d34c21dc6e62b16cc3e766f60efd732ba4daf0b1310e246896f4de678e430d1ed299dd4b44f058bce6c85a34a2d8166cfdaa0abc2a0f5f52ad21a28a01811a5b00736d4abb184acb237017554604f1caf44f7fab4a162f99dc9a4c13c32db65d83578d6cc054c0974a481e358382c3eb1c59d2cce304f6f1f03548973abad7e60cba77554a7608f207b83e7a1b7fa1285920085f163b4e32890a66e1ac555720ff9ad6ae34f6ff9d07f476ff633", @ANYRES32=r7, @ANYBLOB="0c0006000300000003000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x2080) [ 2066.633893] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2066.639264] vmalloc_user+0x47/0xa0 [ 2066.642907] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2066.647230] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2066.652592] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2066.656740] __vb2_queue_alloc+0x47a/0xd90 [ 2066.660992] vb2_core_create_bufs+0x279/0x5a0 [ 2066.665488] ? __vb2_queue_free+0x7a0/0x7a0 [ 2066.669817] ? futex_wait+0x42f/0x5a0 [ 2066.673637] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.679002] ? trace_hardirqs_on+0x10/0x10 [ 2066.683240] vb2_create_bufs+0x2e1/0x5b0 [ 2066.687303] ? vb2_thread_start+0x310/0x310 [ 2066.691650] ? futex_wait+0x42f/0x5a0 [ 2066.695456] v4l_create_bufs+0xa4/0x150 [ 2066.699434] __video_do_ioctl+0x65b/0x6a0 [ 2066.703587] ? video_ioctl2+0x30/0x30 [ 2066.707386] ? __might_fault+0x177/0x1b0 [ 2066.711444] ? video_ioctl2+0x30/0x30 [ 2066.715240] video_usercopy+0xfd/0xe70 [ 2066.719134] ? v4l_g_ctrl+0x390/0x390 [ 2066.722936] ? lock_acquire+0x170/0x3f0 [ 2066.726912] ? lock_downgrade+0x740/0x740 13:07:15 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x28000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{}, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x92, 0x10, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) [ 2066.731062] ? trace_hardirqs_on+0x10/0x10 [ 2066.735299] ? futex_exit_release+0x220/0x220 [ 2066.739805] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2066.744909] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2066.749925] v4l2_ioctl+0x1bb/0x2f0 [ 2066.753547] ? v4l2_open+0x2f0/0x2f0 [ 2066.757268] do_vfs_ioctl+0x75a/0xff0 [ 2066.761070] ? ioctl_preallocate+0x1a0/0x1a0 [ 2066.765481] ? lock_downgrade+0x740/0x740 [ 2066.769631] ? __fget+0x225/0x360 [ 2066.773082] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.777076] ? security_file_ioctl+0x83/0xb0 [ 2066.781511] SyS_ioctl+0x7f/0xb0 [ 2066.784878] ? do_vfs_ioctl+0xff0/0xff0 [ 2066.788859] do_syscall_64+0x1d5/0x640 [ 2066.792750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2066.797964] RIP: 0033:0x466459 [ 2066.801146] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2066.808849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2066.816115] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2066.823380] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2066.830661] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2066.837930] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2066.863983] warn_alloc_show_mem: 1 callbacks suppressed [ 2066.863987] Mem-Info: [ 2066.876998] active_anon:87265 inactive_anon:27052 isolated_anon:0 [ 2066.876998] active_file:2220 inactive_file:8678 isolated_file:0 [ 2066.876998] unevictable:0 dirty:258 writeback:0 unstable:0 [ 2066.876998] slab_reclaimable:14494 slab_unreclaimable:128513 [ 2066.876998] mapped:59314 shmem:27412 pagetables:6920 bounce:0 [ 2066.876998] free:1353805 free_pcp:213 free_cma:0 13:07:15 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6, 0x1) r1 = getpid() r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x80, 0x2, 0x81, 0x7f, 0x0, 0x9, 0x40000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0xe00000000000, 0xfff}, 0x1224, 0x8, 0xffff, 0x0, 0x1, 0x80000001, 0x1ff}, r1, 0x7, r0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8192000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001600000426bd7000fcdbdf2502180800", @ANYRES32=0x0, @ANYBLOB="14000300677e257461703000000000f80900000014000600200000000400008000000800000008000208aca572dd5000"], 0x48}, 0x1, 0x0, 0x0, 0x48c0}, 0x400c044) r3 = getpid() getpgid(r3) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x81, 0x3f, 0x1f, 0x3f, 0x0, 0x4, 0x1400, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd6, 0x1, @perf_config_ext={0x2, 0x1}, 0x40004, 0x80000001, 0x6, 0x5, 0x7, 0x743, 0x200}, r3, 0x10, r2, 0x2) [ 2066.922852] Node 0 active_anon:346488kB inactive_anon:59440kB active_file:4824kB inactive_file:32536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232668kB dirty:1012kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 13:07:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xb8, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x7c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5d}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7a}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x4000) [ 2066.961984] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4240kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2066.990141] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.018041] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2067.033004] Node 0 DMA32 free:1431340kB min:36200kB low:45248kB high:54296kB active_anon:346416kB inactive_anon:59440kB active_file:4824kB inactive_file:32540kB unevictable:0kB writepending:1016kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27584kB bounce:0kB free_pcp:868kB local_pcp:308kB free_cma:0kB [ 2067.067787] lowmem_reserve[]: 0 0 0 0 0 13:07:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x988afc4960393e7e, 0x81, 0x6, 0x9, 0x41, @mcast1, @local, 0xadf0d082f2619d89, 0x8, 0x7, 0x4}}) [ 2067.072747] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.100958] lowmem_reserve[]: 0 0 0 0 0 [ 2067.109401] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2067.138185] lowmem_reserve[]: 0 0 0 0 0 [ 2067.142276] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2067.158760] Node 0 DMA32: 1158*4kB (UME) 1732*8kB (UME) 2559*16kB (UME) 2437*32kB (UME) 4257*64kB (U) 2137*128kB (U) 758*256kB (U) 354*512kB (U) 155*1024kB (U) 104*2048kB (UM) 0*4096kB = 1430408kB [ 2067.181126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2067.192003] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2067.211448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2067.220866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:16 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x0, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x101) 13:07:16 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:16 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2]}}, 0xfffffffe}) 13:07:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2067.230022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2067.239642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2067.248792] 35382 total pagecache pages [ 2067.252821] 0 pages in swap cache [ 2067.256318] Swap cache stats: add 0, delete 0, find 0/0 [ 2067.262609] Free swap = 0kB [ 2067.265661] Total swap = 0kB [ 2067.269707] 2097051 pages RAM [ 2067.272808] 0 pages HighMem/MovableOnly [ 2067.276764] 363849 pages reserved [ 2067.281964] 0 pages cma reserved 13:07:16 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200140, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0xffffffff, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:16 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x40, 0x3, 0x7, 0x7, 0x0, 0x0, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x9}, 0x50008, 0x78, 0x5, 0x9, 0x80000000, 0x0, 0x3}, r1, 0xd, r0, 0x0) 13:07:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:16 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:16 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2]}}, 0xfffffffe}) 13:07:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000000}, 0x8484, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) 13:07:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000100660010002cbd7000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="070003000e000a000b00060008000b000100000008000b000800000008000b0000a0160008000b0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x48811}, 0x5) [ 2067.580656] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2067.599632] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2067.605390] CPU: 0 PID: 22426 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2067.613277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2067.622653] Call Trace: [ 2067.625276] dump_stack+0x1b2/0x281 13:07:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x4, 0xffff}, {0xe, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) [ 2067.628909] warn_alloc.cold+0x96/0x1cc [ 2067.632886] ? zone_watermark_ok_safe+0x220/0x220 [ 2067.637729] ? trace_hardirqs_on+0x10/0x10 [ 2067.641963] ? deref_stack_reg+0x124/0x1a0 [ 2067.646207] ? fs_reclaim_release+0xd0/0x110 [ 2067.650623] __vmalloc_node_range+0x10e/0x150 [ 2067.655125] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2067.660490] vmalloc_user+0x47/0xa0 [ 2067.664120] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2067.668443] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2067.673805] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2067.677953] __vb2_queue_alloc+0x47a/0xd90 [ 2067.682211] vb2_core_create_bufs+0x279/0x5a0 [ 2067.686709] ? __vb2_queue_free+0x7a0/0x7a0 [ 2067.691090] ? futex_wait+0x42f/0x5a0 [ 2067.694890] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.700258] ? trace_hardirqs_on+0x10/0x10 [ 2067.704497] vb2_create_bufs+0x2e1/0x5b0 [ 2067.708564] ? vb2_thread_start+0x310/0x310 [ 2067.712883] ? futex_wait+0x42f/0x5a0 [ 2067.716689] v4l_create_bufs+0xa4/0x150 [ 2067.720756] __video_do_ioctl+0x65b/0x6a0 [ 2067.724908] ? video_ioctl2+0x30/0x30 [ 2067.728709] ? __might_fault+0x177/0x1b0 [ 2067.732777] ? video_ioctl2+0x30/0x30 [ 2067.736564] video_usercopy+0xfd/0xe70 [ 2067.740457] ? v4l_g_ctrl+0x390/0x390 [ 2067.744343] ? lock_acquire+0x170/0x3f0 [ 2067.748319] ? lock_downgrade+0x740/0x740 [ 2067.752557] ? trace_hardirqs_on+0x10/0x10 [ 2067.756793] ? futex_exit_release+0x220/0x220 [ 2067.761294] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2067.766411] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2067.771423] v4l2_ioctl+0x1bb/0x2f0 [ 2067.775048] ? v4l2_open+0x2f0/0x2f0 [ 2067.778764] do_vfs_ioctl+0x75a/0xff0 [ 2067.782598] ? ioctl_preallocate+0x1a0/0x1a0 [ 2067.787003] ? lock_downgrade+0x740/0x740 [ 2067.791155] ? __fget+0x225/0x360 [ 2067.794607] ? do_vfs_ioctl+0xff0/0xff0 [ 2067.798594] ? security_file_ioctl+0x83/0xb0 [ 2067.803003] SyS_ioctl+0x7f/0xb0 [ 2067.806364] ? do_vfs_ioctl+0xff0/0xff0 [ 2067.810339] do_syscall_64+0x1d5/0x640 [ 2067.814246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2067.819448] RIP: 0033:0x466459 [ 2067.822636] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2067.830344] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2067.837611] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2067.844900] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2067.852161] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2067.859427] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 [ 2067.903623] Mem-Info: [ 2067.906265] active_anon:86693 inactive_anon:27052 isolated_anon:0 [ 2067.906265] active_file:2221 inactive_file:8689 isolated_file:0 [ 2067.906265] unevictable:0 dirty:270 writeback:0 unstable:0 [ 2067.906265] slab_reclaimable:14459 slab_unreclaimable:128697 [ 2067.906265] mapped:59228 shmem:27412 pagetables:6869 bounce:0 [ 2067.906265] free:1341065 free_pcp:334 free_cma:0 [ 2067.946884] Node 0 active_anon:346380kB inactive_anon:59440kB active_file:4828kB inactive_file:32548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232608kB dirty:1028kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2067.977048] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2068.004741] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.031859] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2068.036905] Node 0 DMA32 free:1377952kB min:36200kB low:45248kB high:54296kB active_anon:346380kB inactive_anon:59440kB active_file:4828kB inactive_file:32564kB unevictable:0kB writepending:1052kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27476kB bounce:0kB free_pcp:1308kB local_pcp:664kB free_cma:0kB [ 2068.068357] lowmem_reserve[]: 0 0 0 0 0 [ 2068.072339] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.098866] lowmem_reserve[]: 0 0 0 0 0 [ 2068.102869] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2068.132387] lowmem_reserve[]: 0 0 0 0 0 [ 2068.136372] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2068.151846] Node 0 DMA32: 1014*4kB (UME) 590*8kB (UME) 48*16kB (UE) 2344*32kB (UME) 4257*64kB (U) 2136*128kB (U) 757*256kB (U) 353*512kB (U) 156*1024kB (U) 104*2048kB (UM) 0*4096kB = 1377672kB [ 2068.169628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2068.180875] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2068.199904] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.209226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.218218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2068.227661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2068.236237] 35391 total pagecache pages [ 2068.240957] 0 pages in swap cache [ 2068.246482] Swap cache stats: add 0, delete 0, find 0/0 [ 2068.252655] Free swap = 0kB [ 2068.255667] Total swap = 0kB [ 2068.259573] 2097051 pages RAM [ 2068.262718] 0 pages HighMem/MovableOnly [ 2068.266667] 363849 pages reserved [ 2068.270905] 0 pages cma reserved 13:07:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r5, 0x8) r6 = getpid() getpgid(r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r6, 0xa, r7, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8044002) 13:07:17 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:17 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:17 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2]}}}) 13:07:17 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2068.386484] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2068.409303] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2068.415027] CPU: 0 PID: 22459 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2068.422915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.432262] Call Trace: 13:07:17 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = getpid() getpid() getpgid(r1) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x1, 0x47, 0x1f, 0x20, 0x0, 0x5, 0x800, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x4000, 0x8, 0x3, 0x7, 0x10000, 0x8, 0x1}, 0xffffffffffffffff, 0x2, r0, 0xf) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x6, 0x0, 0x9, 0x4, 0x0, 0x20677990, 0xa0240, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x29, 0x4, 0x2, 0x6, 0x10000, 0x626, 0x90c4}, 0x0, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x5, 0x0, 0x20, 0x0, 0x2, 0x8, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x94, 0x81}, 0x100, 0x0, 0xd6ac, 0x4, 0x82, 0x4, 0x2}, r1, 0xd, r2, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000180)={'ip6erspan0\x00'}) [ 2068.434854] dump_stack+0x1b2/0x281 [ 2068.438487] warn_alloc.cold+0x96/0x1cc [ 2068.442466] ? zone_watermark_ok_safe+0x220/0x220 [ 2068.447311] ? trace_hardirqs_on+0x10/0x10 [ 2068.451547] ? deref_stack_reg+0x124/0x1a0 [ 2068.455787] ? fs_reclaim_release+0xd0/0x110 [ 2068.460211] __vmalloc_node_range+0x10e/0x150 [ 2068.464712] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2068.470070] vmalloc_user+0x47/0xa0 [ 2068.473700] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2068.478012] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2068.483355] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2068.487483] __vb2_queue_alloc+0x47a/0xd90 [ 2068.491711] vb2_core_create_bufs+0x279/0x5a0 [ 2068.496199] ? __vb2_queue_free+0x7a0/0x7a0 [ 2068.500513] ? futex_wait+0x42f/0x5a0 [ 2068.504299] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2068.509640] ? trace_hardirqs_on+0x10/0x10 [ 2068.513853] vb2_create_bufs+0x2e1/0x5b0 [ 2068.517980] ? vb2_thread_start+0x310/0x310 [ 2068.522283] ? futex_wait+0x42f/0x5a0 [ 2068.526065] v4l_create_bufs+0xa4/0x150 [ 2068.530017] __video_do_ioctl+0x65b/0x6a0 [ 2068.534145] ? video_ioctl2+0x30/0x30 [ 2068.537925] ? __might_fault+0x177/0x1b0 [ 2068.541964] ? video_ioctl2+0x30/0x30 [ 2068.545743] video_usercopy+0xfd/0xe70 [ 2068.549611] ? v4l_g_ctrl+0x390/0x390 [ 2068.553391] ? lock_acquire+0x170/0x3f0 [ 2068.557345] ? lock_downgrade+0x740/0x740 [ 2068.561473] ? trace_hardirqs_on+0x10/0x10 [ 2068.565701] ? futex_exit_release+0x220/0x220 [ 2068.570180] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2068.575263] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2068.580259] v4l2_ioctl+0x1bb/0x2f0 [ 2068.583865] ? v4l2_open+0x2f0/0x2f0 [ 2068.587569] do_vfs_ioctl+0x75a/0xff0 [ 2068.591391] ? ioctl_preallocate+0x1a0/0x1a0 [ 2068.595777] ? lock_downgrade+0x740/0x740 [ 2068.599953] ? __fget+0x225/0x360 [ 2068.603432] ? do_vfs_ioctl+0xff0/0xff0 [ 2068.607390] ? security_file_ioctl+0x83/0xb0 [ 2068.611826] SyS_ioctl+0x7f/0xb0 [ 2068.615214] ? do_vfs_ioctl+0xff0/0xff0 [ 2068.619286] do_syscall_64+0x1d5/0x640 [ 2068.623165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2068.628334] RIP: 0033:0x466459 13:07:17 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:17 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:17 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x0, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:17 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) [ 2068.631514] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2068.639199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2068.646447] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2068.653694] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2068.660957] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2068.668204] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 13:07:17 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59134, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x9, 0x31364d4e, 0x2, @discrete={0xfffffefc, 0x400}}) r0 = socket$inet6(0xa, 0x1, 0xfad7) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@private, @in6=@local}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) 13:07:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r5, 0x8) r6 = getpid() getpgid(r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r6, 0xa, r7, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8044002) [ 2068.755309] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2068.786332] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2068.797588] CPU: 1 PID: 22485 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 13:07:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r5, 0x8) r6 = getpid() getpgid(r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r6, 0xa, r7, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8044002) [ 2068.805515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2068.814866] Call Trace: [ 2068.817457] dump_stack+0x1b2/0x281 [ 2068.821176] warn_alloc.cold+0x96/0x1cc [ 2068.825154] ? zone_watermark_ok_safe+0x220/0x220 [ 2068.829996] ? trace_hardirqs_on+0x10/0x10 [ 2068.834236] ? deref_stack_reg+0x124/0x1a0 [ 2068.838476] ? fs_reclaim_release+0xd0/0x110 [ 2068.842906] __vmalloc_node_range+0x10e/0x150 [ 2068.847409] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 13:07:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r5, 0x8) r6 = getpid() getpgid(r6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r6, 0xa, r7, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8044002) [ 2068.852769] vmalloc_user+0x47/0xa0 [ 2068.856394] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2068.860714] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2068.866073] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2068.870228] __vb2_queue_alloc+0x47a/0xd90 [ 2068.874476] vb2_core_create_bufs+0x279/0x5a0 [ 2068.878973] ? __vb2_queue_free+0x7a0/0x7a0 [ 2068.883299] ? futex_wait+0x42f/0x5a0 [ 2068.887100] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2068.892463] ? trace_hardirqs_on+0x10/0x10 [ 2068.896709] vb2_create_bufs+0x2e1/0x5b0 [ 2068.900776] ? vb2_thread_start+0x310/0x310 [ 2068.905155] ? futex_wait+0x42f/0x5a0 [ 2068.908961] v4l_create_bufs+0xa4/0x150 [ 2068.912936] __video_do_ioctl+0x65b/0x6a0 [ 2068.917112] ? video_ioctl2+0x30/0x30 [ 2068.921089] ? __might_fault+0x177/0x1b0 [ 2068.925149] ? video_ioctl2+0x30/0x30 [ 2068.928948] video_usercopy+0xfd/0xe70 [ 2068.932838] ? v4l_g_ctrl+0x390/0x390 [ 2068.936667] ? lock_acquire+0x170/0x3f0 [ 2068.940648] ? lock_downgrade+0x740/0x740 [ 2068.944797] ? trace_hardirqs_on+0x10/0x10 [ 2068.949033] ? futex_exit_release+0x220/0x220 [ 2068.953528] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2068.958634] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2068.963654] v4l2_ioctl+0x1bb/0x2f0 [ 2068.967290] ? v4l2_open+0x2f0/0x2f0 [ 2068.971007] do_vfs_ioctl+0x75a/0xff0 [ 2068.974841] ? ioctl_preallocate+0x1a0/0x1a0 [ 2068.979250] ? lock_downgrade+0x740/0x740 [ 2068.983408] ? __fget+0x225/0x360 [ 2068.986877] ? do_vfs_ioctl+0xff0/0xff0 [ 2068.990857] ? security_file_ioctl+0x83/0xb0 [ 2068.995267] SyS_ioctl+0x7f/0xb0 [ 2068.998635] ? do_vfs_ioctl+0xff0/0xff0 [ 2069.002612] do_syscall_64+0x1d5/0x640 [ 2069.006509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2069.011692] RIP: 0033:0x466459 [ 2069.014878] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.022584] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2069.029850] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2069.037119] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2069.044386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 13:07:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2069.051658] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2069.061511] warn_alloc_show_mem: 1 callbacks suppressed [ 2069.061515] Mem-Info: [ 2069.077577] active_anon:86740 inactive_anon:27052 isolated_anon:0 [ 2069.077577] active_file:2221 inactive_file:8701 isolated_file:0 [ 2069.077577] unevictable:0 dirty:281 writeback:0 unstable:0 [ 2069.077577] slab_reclaimable:14446 slab_unreclaimable:128145 [ 2069.077577] mapped:59282 shmem:27412 pagetables:6925 bounce:0 [ 2069.077577] free:1354896 free_pcp:270 free_cma:0 [ 2069.112223] Node 0 active_anon:346492kB inactive_anon:59440kB active_file:4848kB inactive_file:32576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232804kB dirty:1148kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 251904kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 13:07:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) [ 2069.141675] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2069.175405] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2069.209002] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2069.214544] Node 0 DMA32 free:1432304kB min:36200kB low:45248kB high:54296kB active_anon:346496kB inactive_anon:59440kB active_file:4848kB inactive_file:32592kB unevictable:0kB writepending:1164kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15712kB pagetables:27620kB bounce:0kB free_pcp:1072kB local_pcp:676kB free_cma:0kB [ 2069.249773] lowmem_reserve[]: 0 0 0 0 0 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) [ 2069.253920] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2069.290755] lowmem_reserve[]: 0 0 0 0 0 [ 2069.295035] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2069.344050] lowmem_reserve[]: 0 0 0 0 0 [ 2069.348301] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2069.365165] Node 0 DMA32: 1301*4kB (UME) 1980*8kB (UME) 2531*16kB (UME) 2418*32kB (UE) 4258*64kB (UM) 2138*128kB (UM) 758*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 103*2048kB (UM) 0*4096kB = 1432100kB [ 2069.383925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2069.395108] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2069.413683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.422673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.431406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2069.440388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2069.449059] 35402 total pagecache pages [ 2069.453026] 0 pages in swap cache 13:07:18 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) 13:07:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:18 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2]}}, 0xfffffffe}) [ 2069.456456] Swap cache stats: add 0, delete 0, find 0/0 [ 2069.461864] Free swap = 0kB [ 2069.464873] Total swap = 0kB [ 2069.468013] 2097051 pages RAM [ 2069.471106] 0 pages HighMem/MovableOnly [ 2069.475074] 363849 pages reserved [ 2069.478596] 0 pages cma reserved 13:07:18 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:18 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) [ 2069.553537] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2069.600391] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2069.619072] CPU: 0 PID: 22539 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2069.626975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2069.636326] Call Trace: [ 2069.638928] dump_stack+0x1b2/0x281 [ 2069.642561] warn_alloc.cold+0x96/0x1cc [ 2069.646538] ? zone_watermark_ok_safe+0x220/0x220 [ 2069.651385] ? trace_hardirqs_on+0x10/0x10 [ 2069.655618] ? deref_stack_reg+0x124/0x1a0 [ 2069.659883] ? fs_reclaim_release+0xd0/0x110 [ 2069.664293] __vmalloc_node_range+0x10e/0x150 [ 2069.668791] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2069.674154] vmalloc_user+0x47/0xa0 [ 2069.677785] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2069.682107] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2069.687467] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2069.691619] __vb2_queue_alloc+0x47a/0xd90 [ 2069.695861] vb2_core_create_bufs+0x279/0x5a0 [ 2069.700361] ? __vb2_queue_free+0x7a0/0x7a0 [ 2069.704688] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2069.710052] ? trace_hardirqs_on+0x10/0x10 [ 2069.714293] vb2_create_bufs+0x2e1/0x5b0 [ 2069.718365] ? vb2_thread_start+0x310/0x310 [ 2069.722693] v4l_create_bufs+0xa4/0x150 [ 2069.726665] __video_do_ioctl+0x65b/0x6a0 [ 2069.730821] ? video_ioctl2+0x30/0x30 [ 2069.734621] ? __might_fault+0x177/0x1b0 [ 2069.738685] ? video_ioctl2+0x30/0x30 [ 2069.742485] video_usercopy+0xfd/0xe70 [ 2069.746381] ? v4l_g_ctrl+0x390/0x390 [ 2069.750183] ? lock_acquire+0x170/0x3f0 [ 2069.754160] ? lock_downgrade+0x740/0x740 [ 2069.758309] ? trace_hardirqs_on+0x10/0x10 [ 2069.762541] ? futex_exit_release+0x220/0x220 [ 2069.767043] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2069.772153] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2069.777178] v4l2_ioctl+0x1bb/0x2f0 [ 2069.780809] ? v4l2_open+0x2f0/0x2f0 [ 2069.784530] do_vfs_ioctl+0x75a/0xff0 [ 2069.788362] ? ioctl_preallocate+0x1a0/0x1a0 [ 2069.792778] ? lock_downgrade+0x740/0x740 [ 2069.796934] ? __fget+0x225/0x360 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) getpid() 13:07:18 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:18 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) 13:07:18 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2069.800393] ? do_vfs_ioctl+0xff0/0xff0 [ 2069.804408] ? security_file_ioctl+0x83/0xb0 [ 2069.808819] SyS_ioctl+0x7f/0xb0 [ 2069.812189] ? do_vfs_ioctl+0xff0/0xff0 [ 2069.816177] do_syscall_64+0x1d5/0x640 [ 2069.820075] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2069.825261] RIP: 0033:0x466459 [ 2069.828453] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.836162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2069.843442] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2069.850709] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2069.857976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2069.865249] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 [ 2069.897494] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2069.911513] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2069.916837] CPU: 0 PID: 22538 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2069.924716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2069.934070] Call Trace: [ 2069.936662] dump_stack+0x1b2/0x281 [ 2069.940293] warn_alloc.cold+0x96/0x1cc [ 2069.944265] ? zone_watermark_ok_safe+0x220/0x220 [ 2069.949098] ? trace_hardirqs_on+0x10/0x10 [ 2069.953347] ? deref_stack_reg+0x124/0x1a0 [ 2069.957562] ? fs_reclaim_release+0xd0/0x110 [ 2069.961951] __vmalloc_node_range+0x10e/0x150 [ 2069.966428] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2069.971776] vmalloc_user+0x47/0xa0 [ 2069.975395] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2069.979727] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2069.985066] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2069.989227] __vb2_queue_alloc+0x47a/0xd90 [ 2069.993446] vb2_core_create_bufs+0x279/0x5a0 [ 2069.997918] ? __vb2_queue_free+0x7a0/0x7a0 [ 2070.002221] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2070.007214] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.012553] ? trace_hardirqs_on+0x10/0x10 [ 2070.017116] vb2_create_bufs+0x2e1/0x5b0 [ 2070.021154] ? vb2_thread_start+0x310/0x310 [ 2070.025465] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2070.030459] v4l_create_bufs+0xa4/0x150 [ 2070.034422] __video_do_ioctl+0x65b/0x6a0 [ 2070.038548] ? video_ioctl2+0x30/0x30 [ 2070.042338] ? __might_fault+0x177/0x1b0 [ 2070.046373] ? video_ioctl2+0x30/0x30 [ 2070.050150] video_usercopy+0xfd/0xe70 [ 2070.054015] ? v4l_g_ctrl+0x390/0x390 [ 2070.057792] ? lock_acquire+0x170/0x3f0 [ 2070.061747] ? trace_hardirqs_on+0x10/0x10 [ 2070.065971] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2070.070976] v4l2_ioctl+0x1bb/0x2f0 [ 2070.074577] ? v4l2_open+0x2f0/0x2f0 [ 2070.078267] do_vfs_ioctl+0x75a/0xff0 [ 2070.082045] ? ioctl_preallocate+0x1a0/0x1a0 [ 2070.086429] ? lock_downgrade+0x740/0x740 [ 2070.090557] ? __fget+0x225/0x360 [ 2070.093998] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.097962] ? security_file_ioctl+0x83/0xb0 [ 2070.102387] SyS_ioctl+0x7f/0xb0 [ 2070.105728] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.109679] do_syscall_64+0x1d5/0x640 [ 2070.113561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.118774] RIP: 0033:0x466459 [ 2070.121937] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.129620] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2070.136869] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2070.144116] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2070.151386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2070.158662] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2070.177561] warn_alloc_show_mem: 1 callbacks suppressed [ 2070.177564] Mem-Info: [ 2070.185510] active_anon:85646 inactive_anon:27052 isolated_anon:0 [ 2070.185510] active_file:2226 inactive_file:8706 isolated_file:0 [ 2070.185510] unevictable:0 dirty:315 writeback:0 unstable:0 [ 2070.185510] slab_reclaimable:14434 slab_unreclaimable:127917 [ 2070.185510] mapped:59247 shmem:27412 pagetables:6836 bounce:0 [ 2070.185510] free:1356527 free_pcp:333 free_cma:0 [ 2070.220756] Node 0 active_anon:342192kB inactive_anon:59440kB active_file:4848kB inactive_file:32616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232700kB dirty:1212kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2070.250678] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2070.278337] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2070.305102] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2070.310196] Node 0 DMA32 free:1436648kB min:36200kB low:45248kB high:54296kB active_anon:342192kB inactive_anon:59440kB active_file:4848kB inactive_file:32616kB unevictable:0kB writepending:1212kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15456kB pagetables:27344kB bounce:0kB free_pcp:1328kB local_pcp:780kB free_cma:0kB [ 2070.340429] lowmem_reserve[]: 0 0 0 0 0 [ 2070.344425] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2070.370011] lowmem_reserve[]: 0 0 0 0 0 [ 2070.374007] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2070.402889] lowmem_reserve[]: 0 0 0 0 0 [ 2070.406885] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2070.421733] Node 0 DMA32: 1320*4kB (UME) 1420*8kB (UME) 2724*16kB (UME) 2458*32kB (UE) 4259*64kB (UM) 2138*128kB (UM) 758*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1436224kB [ 2070.440540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2070.451338] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2070.469758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2070.478676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2070.487445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:19 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) 13:07:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:19 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2]}}}) 13:07:19 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xee00]) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x5a3100, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x3, 0x0, 0xee00, 0xee00, r0, 0x40, 0x3}, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff}) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x408}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:19 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) [ 2070.496300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2070.504934] 35411 total pagecache pages [ 2070.508963] 0 pages in swap cache [ 2070.512400] Swap cache stats: add 0, delete 0, find 0/0 [ 2070.517815] Free swap = 0kB [ 2070.520827] Total swap = 0kB [ 2070.523848] 2097051 pages RAM [ 2070.526995] 0 pages HighMem/MovableOnly [ 2070.530955] 363849 pages reserved [ 2070.534383] 0 pages cma reserved 13:07:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) 13:07:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x42}, 0x27}) [ 2070.590112] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2070.636892] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2070.652844] CPU: 1 PID: 22576 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2070.660735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2070.670082] Call Trace: [ 2070.672670] dump_stack+0x1b2/0x281 [ 2070.676309] warn_alloc.cold+0x96/0x1cc [ 2070.680287] ? zone_watermark_ok_safe+0x220/0x220 [ 2070.685121] ? trace_hardirqs_on+0x10/0x10 [ 2070.689348] ? deref_stack_reg+0x124/0x1a0 [ 2070.693599] ? fs_reclaim_release+0xd0/0x110 [ 2070.698013] __vmalloc_node_range+0x10e/0x150 [ 2070.702515] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2070.707876] vmalloc_user+0x47/0xa0 [ 2070.711499] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2070.715818] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2070.721182] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2070.725329] __vb2_queue_alloc+0x47a/0xd90 [ 2070.729579] vb2_core_create_bufs+0x279/0x5a0 13:07:19 executing program 0: r0 = socket(0x4, 0x80000, 0x3) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2070.734076] ? __vb2_queue_free+0x7a0/0x7a0 [ 2070.738404] ? futex_wait+0x42f/0x5a0 [ 2070.742211] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.747664] ? trace_hardirqs_on+0x10/0x10 [ 2070.751898] vb2_create_bufs+0x2e1/0x5b0 [ 2070.755965] ? vb2_thread_start+0x310/0x310 [ 2070.760288] ? futex_wait+0x42f/0x5a0 [ 2070.764093] v4l_create_bufs+0xa4/0x150 [ 2070.768070] __video_do_ioctl+0x65b/0x6a0 [ 2070.772227] ? video_ioctl2+0x30/0x30 [ 2070.776030] ? __might_fault+0x177/0x1b0 [ 2070.780094] ? video_ioctl2+0x30/0x30 [ 2070.783913] video_usercopy+0xfd/0xe70 13:07:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x2, 0x9, 0x40, 0x0, 0xff, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe0d1, 0x4, @perf_config_ext={0x4806, 0x543}, 0x4, 0x8, 0x9, 0x4, 0xff, 0x5, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x8) r2 = semget(0x0, 0x4, 0x1a2) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000040)=""/28) [ 2070.787802] ? v4l_g_ctrl+0x390/0x390 [ 2070.791599] ? lock_acquire+0x170/0x3f0 [ 2070.795572] ? lock_downgrade+0x740/0x740 [ 2070.799729] ? trace_hardirqs_on+0x10/0x10 [ 2070.803967] ? futex_exit_release+0x220/0x220 [ 2070.808461] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2070.813559] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2070.818573] v4l2_ioctl+0x1bb/0x2f0 [ 2070.822205] ? v4l2_open+0x2f0/0x2f0 [ 2070.825919] do_vfs_ioctl+0x75a/0xff0 [ 2070.829722] ? ioctl_preallocate+0x1a0/0x1a0 13:07:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x400, 0x70bd27, 0x25dfdbff, {0x7}, [@NDTA_NAME={0x8, 0x1, '^%a\x00'}, @NDTA_THRESH2={0x8, 0x3, 0x600000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x88) [ 2070.834128] ? lock_downgrade+0x740/0x740 [ 2070.838279] ? __fget+0x225/0x360 [ 2070.841736] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.845717] ? security_file_ioctl+0x83/0xb0 [ 2070.850125] SyS_ioctl+0x7f/0xb0 [ 2070.853484] ? do_vfs_ioctl+0xff0/0xff0 [ 2070.857480] do_syscall_64+0x1d5/0x640 [ 2070.861373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2070.866559] RIP: 0033:0x466459 [ 2070.869741] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.877473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 13:07:19 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:19 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:19 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2]}}}) 13:07:19 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x5, 0x420c00) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x80, 0x1, 0x81, 0x3f, 0x0, 0x1, 0x69001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x5}, 0x200, 0x6, 0x0, 0x5, 0x4, 0x8000000, 0x1ff}, 0xffffffffffffffff, 0x4, r3, 0xc) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r4, r0, 0x23}, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xfffffffe) [ 2070.884740] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2070.892004] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2070.899271] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2070.906536] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:19 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 13:07:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x20, 0xffffffffffffffff, 0x5) 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2071.010411] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2071.053465] syz-executor.4 cpuset=/ mems_allowed=0-1 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2071.085001] CPU: 0 PID: 22620 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2071.092914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.102266] Call Trace: [ 2071.104857] dump_stack+0x1b2/0x281 [ 2071.108490] warn_alloc.cold+0x96/0x1cc [ 2071.112466] ? zone_watermark_ok_safe+0x220/0x220 [ 2071.117300] ? trace_hardirqs_on+0x10/0x10 [ 2071.121533] ? deref_stack_reg+0x124/0x1a0 [ 2071.125770] ? fs_reclaim_release+0xd0/0x110 [ 2071.130185] __vmalloc_node_range+0x10e/0x150 [ 2071.134773] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2071.140136] vmalloc_user+0x47/0xa0 [ 2071.143764] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2071.148085] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2071.153450] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2071.157602] __vb2_queue_alloc+0x47a/0xd90 [ 2071.161849] vb2_core_create_bufs+0x279/0x5a0 [ 2071.166349] ? __vb2_queue_free+0x7a0/0x7a0 [ 2071.170679] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2071.175708] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb 13:07:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2071.185237] ? trace_hardirqs_on+0x10/0x10 [ 2071.189474] vb2_create_bufs+0x2e1/0x5b0 [ 2071.193543] ? vb2_thread_start+0x310/0x310 [ 2071.197868] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2071.202896] v4l_create_bufs+0xa4/0x150 [ 2071.206877] __video_do_ioctl+0x65b/0x6a0 [ 2071.211030] ? video_ioctl2+0x30/0x30 [ 2071.214834] ? __might_fault+0x177/0x1b0 [ 2071.218895] ? video_ioctl2+0x30/0x30 [ 2071.222697] video_usercopy+0xfd/0xe70 [ 2071.226592] ? v4l_g_ctrl+0x390/0x390 [ 2071.230395] ? lock_acquire+0x170/0x3f0 13:07:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2071.234372] ? trace_hardirqs_on+0x10/0x10 [ 2071.238605] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2071.243620] v4l2_ioctl+0x1bb/0x2f0 [ 2071.247244] ? v4l2_open+0x2f0/0x2f0 [ 2071.250957] do_vfs_ioctl+0x75a/0xff0 [ 2071.254847] ? ioctl_preallocate+0x1a0/0x1a0 [ 2071.259255] ? lock_downgrade+0x740/0x740 [ 2071.263409] ? __fget+0x225/0x360 [ 2071.266873] ? do_vfs_ioctl+0xff0/0xff0 [ 2071.270847] ? security_file_ioctl+0x83/0xb0 [ 2071.275260] SyS_ioctl+0x7f/0xb0 [ 2071.278629] ? do_vfs_ioctl+0xff0/0xff0 13:07:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x81000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x7}, 0x0, 0x9e, 0xffffffff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) [ 2071.282615] do_syscall_64+0x1d5/0x640 [ 2071.286512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2071.291702] RIP: 0033:0x466459 [ 2071.294883] RSP: 002b:00007ff2a6136188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2071.302592] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2071.309860] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 2071.317128] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2071.324395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2071.331669] R13: 00007fffa9aad09f R14: 00007ff2a6136300 R15: 0000000000022000 [ 2071.379655] warn_alloc_show_mem: 1 callbacks suppressed [ 2071.379659] Mem-Info: [ 2071.387613] active_anon:86185 inactive_anon:27052 isolated_anon:0 [ 2071.387613] active_file:2226 inactive_file:8717 isolated_file:0 [ 2071.387613] unevictable:0 dirty:322 writeback:0 unstable:0 [ 2071.387613] slab_reclaimable:14418 slab_unreclaimable:128275 [ 2071.387613] mapped:59275 shmem:27412 pagetables:6884 bounce:0 [ 2071.387613] free:1355592 free_pcp:244 free_cma:0 [ 2071.424339] Node 0 active_anon:346528kB inactive_anon:59440kB active_file:4848kB inactive_file:32660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233096kB dirty:1236kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2071.453911] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2071.482717] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2071.509459] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2071.514557] Node 0 DMA32 free:1432904kB min:36200kB low:45248kB high:54296kB active_anon:344348kB inactive_anon:59440kB active_file:4848kB inactive_file:32664kB unevictable:0kB writepending:1248kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15520kB pagetables:27536kB bounce:0kB free_pcp:1124kB local_pcp:420kB free_cma:0kB [ 2071.544791] lowmem_reserve[]: 0 0 0 0 0 [ 2071.549071] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2071.575010] lowmem_reserve[]: 0 0 0 0 0 [ 2071.579515] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2071.608705] lowmem_reserve[]: 0 0 0 0 0 [ 2071.612683] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2071.628782] Node 0 DMA32: 1242*4kB (UME) 801*8kB (UME) 2924*16kB (UME) 2518*32kB (UME) 4260*64kB (UM) 2137*128kB (UM) 759*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 104*2048kB (UM) 0*4096kB = 1434224kB [ 2071.647365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2071.660713] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2071.679958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2071.689490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2071.698583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2071.708008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2071.716580] 35420 total pagecache pages [ 2071.721282] 0 pages in swap cache [ 2071.724738] Swap cache stats: add 0, delete 0, find 0/0 [ 2071.730841] Free swap = 0kB [ 2071.733852] Total swap = 0kB [ 2071.736915] 2097051 pages RAM [ 2071.742304] 0 pages HighMem/MovableOnly [ 2071.746267] 363849 pages reserved [ 2071.750481] 0 pages cma reserved [ 2071.753937] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2071.767505] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2071.772759] CPU: 1 PID: 22621 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2071.780670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2071.790018] Call Trace: [ 2071.792598] dump_stack+0x1b2/0x281 [ 2071.796219] warn_alloc.cold+0x96/0x1cc [ 2071.800185] ? zone_watermark_ok_safe+0x220/0x220 [ 2071.805014] ? trace_hardirqs_on+0x10/0x10 [ 2071.809247] ? deref_stack_reg+0x124/0x1a0 [ 2071.813475] ? fs_reclaim_release+0xd0/0x110 [ 2071.817903] __vmalloc_node_range+0x10e/0x150 [ 2071.822398] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2071.827749] vmalloc_user+0x47/0xa0 [ 2071.831365] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2071.835675] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2071.841032] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2071.845168] __vb2_queue_alloc+0x47a/0xd90 [ 2071.849418] vb2_core_create_bufs+0x279/0x5a0 [ 2071.853913] ? __vb2_queue_free+0x7a0/0x7a0 [ 2071.858237] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2071.863243] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2071.868589] ? trace_hardirqs_on+0x10/0x10 [ 2071.872834] vb2_create_bufs+0x2e1/0x5b0 [ 2071.876891] ? vb2_thread_start+0x310/0x310 [ 2071.881208] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2071.886225] v4l_create_bufs+0xa4/0x150 [ 2071.890200] __video_do_ioctl+0x65b/0x6a0 [ 2071.894350] ? video_ioctl2+0x30/0x30 [ 2071.898150] ? __might_fault+0x177/0x1b0 [ 2071.902208] ? video_ioctl2+0x30/0x30 [ 2071.905988] video_usercopy+0xfd/0xe70 [ 2071.909868] ? v4l_g_ctrl+0x390/0x390 [ 2071.913654] ? lock_acquire+0x170/0x3f0 [ 2071.917617] ? trace_hardirqs_on+0x10/0x10 [ 2071.921863] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2071.926864] v4l2_ioctl+0x1bb/0x2f0 [ 2071.930487] ? v4l2_open+0x2f0/0x2f0 [ 2071.934196] do_vfs_ioctl+0x75a/0xff0 [ 2071.937990] ? ioctl_preallocate+0x1a0/0x1a0 [ 2071.942384] ? lock_downgrade+0x740/0x740 [ 2071.946513] ? __fget+0x225/0x360 [ 2071.949955] ? do_vfs_ioctl+0xff0/0xff0 [ 2071.953920] ? security_file_ioctl+0x83/0xb0 [ 2071.958316] SyS_ioctl+0x7f/0xb0 [ 2071.961672] ? do_vfs_ioctl+0xff0/0xff0 [ 2071.965669] do_syscall_64+0x1d5/0x640 [ 2071.969580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2071.974759] RIP: 0033:0x466459 13:07:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:20 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0xe5, 0x7f, 0x0, 0x0, 0x0, 0x10082, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x509, 0x1, 0x2, 0x0, 0x80000001, 0x4, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x1f}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000800)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x2e0, 0x0, 0xffffffff, 0x1d0, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0xffffffffffffffff, [0x2, 0x4, 0x0, 0x0, 0x0, 0x7], 0x5, 0x2}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1={0xfc, 0x1, [], 0x1}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @icmp_id=0x68}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'wlan1\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x200, 0x101, 0x0, 0xf46}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64, @port=0x4}}}}, {{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'rose0\x00', 'wg0\x00', {0xff}, {0xff}, 0x67, 0x1, 0x22}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x80}}, @common=@set={{0x40, 'set\x00'}, {{0x1, [0x7, 0x0, 0x1, 0x4, 0x1, 0x3], 0x5, 0x6}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @icmp_id=0x64}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0x0, 'team0\x00', 'veth1_vlan\x00', {}, {}, 0x84, 0x0, 0x30}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @loopback, @remote, @gre_key=0x5, @icmp_id=0x65}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 13:07:20 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:20 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x3f, 0x8001, 0x1, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x0, 0x2]}}}) [ 2071.977936] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2071.985642] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2071.992924] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2072.000179] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2072.007440] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2072.014728] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 13:07:20 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2072.123996] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2072.151862] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2072.160740] CPU: 0 PID: 22675 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 13:07:20 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xc000000, 0x14402) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000300)) r2 = accept$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x9, 0x0, 0xff, 0xa, 0x4, 0x6}, 0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x81, @mcast1, 0x5}, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x61fb}, 0x0, [0xdb, 0x3ff, 0x6bbb, 0xffffffd9, 0x9, 0x7, 0x20, 0x5]}, 0x5c) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0xb0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x178, 0x1403, 0x401, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40040) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2072.168636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.177992] Call Trace: [ 2072.180602] dump_stack+0x1b2/0x281 [ 2072.181930] Cannot find set identified by id 65535 to match [ 2072.184232] warn_alloc.cold+0x96/0x1cc [ 2072.184246] ? zone_watermark_ok_safe+0x220/0x220 [ 2072.184255] ? trace_hardirqs_on+0x10/0x10 [ 2072.184270] ? deref_stack_reg+0x124/0x1a0 [ 2072.207223] ? fs_reclaim_release+0xd0/0x110 [ 2072.211643] __vmalloc_node_range+0x10e/0x150 [ 2072.216146] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 13:07:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x40, 0x0, 0x20, 0x6, 0x0, 0x5, 0x1800, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1be049f7018bfadf, @perf_bp={&(0x7f00000000c0), 0xb}, 0x41c22, 0x7, 0x1ff, 0x4, 0x33, 0x5, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7f, 0x4c, 0x7f, 0x95, 0x0, 0x9, 0x40, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x100, 0x8, 0x7, 0x0, 0x6, 0x100, 0x400}, 0x0, 0x4, r0, 0x9) [ 2072.221511] vmalloc_user+0x47/0xa0 [ 2072.225142] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2072.229463] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2072.234827] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2072.239012] __vb2_queue_alloc+0x47a/0xd90 [ 2072.243284] vb2_core_create_bufs+0x279/0x5a0 [ 2072.247782] ? __vb2_queue_free+0x7a0/0x7a0 [ 2072.252129] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2072.257513] ? trace_hardirqs_on+0x10/0x10 [ 2072.261750] vb2_create_bufs+0x2e1/0x5b0 [ 2072.265817] ? vb2_thread_start+0x310/0x310 [ 2072.270755] v4l_create_bufs+0xa4/0x150 13:07:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}}, 0x88) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000051400042dbd7000ffdbdf250800010002000000080003000400000008000100000000000800030002000000080001000200000008000300048000000800010002000000080003000000000008000100010000000800030001000000080001000000000008000300010000000800010000000000080003000000000008000100010000000800030003000000"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2072.274742] __video_do_ioctl+0x65b/0x6a0 [ 2072.278897] ? video_ioctl2+0x30/0x30 [ 2072.282699] ? __might_fault+0x177/0x1b0 [ 2072.286768] ? video_ioctl2+0x30/0x30 [ 2072.291528] video_usercopy+0xfd/0xe70 [ 2072.295421] ? v4l_g_ctrl+0x390/0x390 [ 2072.299228] ? lock_acquire+0x170/0x3f0 [ 2072.303201] ? lock_downgrade+0x740/0x740 [ 2072.307350] ? trace_hardirqs_on+0x10/0x10 [ 2072.311586] ? futex_exit_release+0x220/0x220 [ 2072.317504] ? _raw_spin_unlock_irqrestore+0x66/0xe0 13:07:21 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x20, 0xd3, 0x8, 0x0, 0xffff, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x5}, 0x6a0, 0x200, 0x7, 0x4, 0x800, 0x20, 0xfff9}, r1, 0xd, r0, 0x1) [ 2072.322623] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2072.327669] v4l2_ioctl+0x1bb/0x2f0 [ 2072.331301] ? v4l2_open+0x2f0/0x2f0 [ 2072.335016] do_vfs_ioctl+0x75a/0xff0 [ 2072.338823] ? ioctl_preallocate+0x1a0/0x1a0 [ 2072.343221] ? lock_downgrade+0x740/0x740 [ 2072.347373] ? __fget+0x225/0x360 [ 2072.350823] ? do_vfs_ioctl+0xff0/0xff0 [ 2072.354817] ? security_file_ioctl+0x83/0xb0 [ 2072.359227] SyS_ioctl+0x7f/0xb0 [ 2072.362588] ? do_vfs_ioctl+0xff0/0xff0 [ 2072.366575] do_syscall_64+0x1d5/0x640 13:07:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2072.370470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2072.375658] RIP: 0033:0x466459 [ 2072.378844] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2072.386554] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2072.393822] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2072.401092] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2072.408716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2072.415988] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2072.461587] warn_alloc_show_mem: 1 callbacks suppressed [ 2072.461591] Mem-Info: [ 2072.472735] active_anon:86190 inactive_anon:27052 isolated_anon:0 [ 2072.472735] active_file:2226 inactive_file:8725 isolated_file:0 [ 2072.472735] unevictable:0 dirty:331 writeback:0 unstable:0 [ 2072.472735] slab_reclaimable:14418 slab_unreclaimable:128175 [ 2072.472735] mapped:59319 shmem:27412 pagetables:6907 bounce:0 [ 2072.472735] free:1355628 free_pcp:278 free_cma:0 [ 2072.516460] Node 0 active_anon:344352kB inactive_anon:59440kB active_file:4848kB inactive_file:32712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:232884kB dirty:1300kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2072.553756] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2072.581781] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2072.608106] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2072.614166] Node 0 DMA32 free:1432756kB min:36200kB low:45248kB high:54296kB active_anon:344312kB inactive_anon:59440kB active_file:4848kB inactive_file:32712kB unevictable:0kB writepending:1304kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15552kB pagetables:27512kB bounce:0kB free_pcp:1300kB local_pcp:652kB free_cma:0kB [ 2072.644483] lowmem_reserve[]: 0 0 0 0 0 [ 2072.648552] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2072.677141] lowmem_reserve[]: 0 0 0 0 0 [ 2072.681144] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2072.712166] lowmem_reserve[]: 0 0 0 0 0 [ 2072.716171] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2072.730967] Node 0 DMA32: 1148*4kB (UME) 256*8kB (UME) 3057*16kB (UME) 2545*32kB (UME) 4258*64kB (UM) 2135*128kB (UM) 761*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 104*2048kB (UM) 0*4096kB = 1432608kB [ 2072.750064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2072.760873] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2072.779528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2072.788436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2072.797073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2072.805903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:21 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = accept(r0, &(0x7f0000000280)=@alg, &(0x7f0000000200)=0x16) recvmsg$kcm(r2, &(0x7f0000002d80)={&(0x7f0000001580)=@isdn, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001600)=""/174, 0xbe}, {&(0x7f00000016c0)=""/36, 0x24}, {&(0x7f0000001700)=""/127, 0x7f}, {&(0x7f0000000180)=""/114, 0xfffffffffffffe58}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/246, 0xf6}, {&(0x7f0000002900)=""/152, 0x98}, {&(0x7f00000029c0)=""/251, 0x133}, {&(0x7f0000000080)=""/205, 0xc3}, {&(0x7f0000002bc0)=""/86, 0x56}], 0xa, &(0x7f0000002d00)=""/100, 0x64}, 0x142) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 13:07:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:21 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:21 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xc000000, 0x14402) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000300)) r2 = accept$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x9, 0x0, 0xff, 0xa, 0x4, 0x6}, 0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x81, @mcast1, 0x5}, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x61fb}, 0x0, [0xdb, 0x3ff, 0x6bbb, 0xffffffd9, 0x9, 0x7, 0x20, 0x5]}, 0x5c) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0xb0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x178, 0x1403, 0x401, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40040) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2072.814533] 35433 total pagecache pages [ 2072.818593] 0 pages in swap cache [ 2072.822036] Swap cache stats: add 0, delete 0, find 0/0 [ 2072.827443] Free swap = 0kB [ 2072.830458] Total swap = 0kB [ 2072.833479] 2097051 pages RAM [ 2072.836571] 0 pages HighMem/MovableOnly [ 2072.841159] 363849 pages reserved [ 2072.844614] 0 pages cma reserved 13:07:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 13:07:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2072.919797] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2072.950115] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2072.959394] CPU: 0 PID: 22720 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 13:07:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = getpid() getpgid(r0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xb2, 0xb7, 0x8, 0x6, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8b9, 0x1, @perf_bp, 0x50101, 0x7, 0x5c3, 0x0, 0x6, 0x7, 0x6528}, r0, 0xe, 0xffffffffffffffff, 0xa) [ 2072.967298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2072.976751] Call Trace: [ 2072.979373] dump_stack+0x1b2/0x281 [ 2072.983005] warn_alloc.cold+0x96/0x1cc [ 2072.986983] ? zone_watermark_ok_safe+0x220/0x220 [ 2072.991825] ? trace_hardirqs_on+0x10/0x10 [ 2072.996058] ? deref_stack_reg+0x124/0x1a0 [ 2073.000294] ? fs_reclaim_release+0xd0/0x110 [ 2073.004708] __vmalloc_node_range+0x10e/0x150 [ 2073.009210] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2073.014575] vmalloc_user+0x47/0xa0 13:07:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x2, 0x9, 0x40, 0x0, 0xff, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe0d1, 0x4, @perf_config_ext={0x4806, 0x543}, 0x4, 0x8, 0x9, 0x4, 0xff, 0x5, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x8) r2 = semget(0x0, 0x4, 0x1a2) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000040)=""/28) [ 2073.018201] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2073.022519] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2073.027882] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2073.032054] __vb2_queue_alloc+0x47a/0xd90 [ 2073.036297] vb2_core_create_bufs+0x279/0x5a0 [ 2073.040791] ? __vb2_queue_free+0x7a0/0x7a0 [ 2073.045113] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2073.050476] ? trace_hardirqs_on+0x10/0x10 [ 2073.054709] vb2_create_bufs+0x2e1/0x5b0 [ 2073.058777] ? vb2_thread_start+0x310/0x310 [ 2073.063100] v4l_create_bufs+0xa4/0x150 [ 2073.067070] __video_do_ioctl+0x65b/0x6a0 [ 2073.071219] ? video_ioctl2+0x30/0x30 [ 2073.075016] ? __might_fault+0x177/0x1b0 [ 2073.079077] ? video_ioctl2+0x30/0x30 [ 2073.082878] video_usercopy+0xfd/0xe70 [ 2073.086797] ? v4l_g_ctrl+0x390/0x390 [ 2073.090594] ? lock_acquire+0x170/0x3f0 [ 2073.094570] ? lock_downgrade+0x740/0x740 [ 2073.098726] ? trace_hardirqs_on+0x10/0x10 [ 2073.102957] ? futex_exit_release+0x220/0x220 [ 2073.107460] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2073.112560] ? debug_check_no_obj_freed+0x2c0/0x680 13:07:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) 13:07:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2073.117578] v4l2_ioctl+0x1bb/0x2f0 [ 2073.121290] ? v4l2_open+0x2f0/0x2f0 [ 2073.125006] do_vfs_ioctl+0x75a/0xff0 [ 2073.128809] ? ioctl_preallocate+0x1a0/0x1a0 [ 2073.133219] ? lock_downgrade+0x740/0x740 [ 2073.137407] ? __fget+0x225/0x360 [ 2073.140863] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.144840] ? security_file_ioctl+0x83/0xb0 [ 2073.149244] SyS_ioctl+0x7f/0xb0 [ 2073.152619] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.156599] do_syscall_64+0x1d5/0x640 [ 2073.160505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2073.165694] RIP: 0033:0x466459 [ 2073.168888] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2073.176594] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2073.183858] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2073.191130] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2073.198398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2073.205665] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:22 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:22 executing program 0: r0 = socket(0x1e, 0x3, 0xfffffffb) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1401, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x804) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000007480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007440)={&(0x7f0000000700)=@newtaction={0x6d14, 0x30, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{0x516c, 0x1, [@m_ipt={0x74, 0x2, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x4}, {0x4b, 0x6, "60516e434525deb897793167030c18ed6bff865273db06038037e18243ae37e6e8649814f06ac21ebb8a694bdf8163e086ea4f9b00c2ae6edb902fd6857826ab56f1873007997a"}, {0xc, 0x7, {0x0, 0x4ad24718577665d6}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x107c, 0x20, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x5, 0x81, 0x4}, 0x2}}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6007}, @TCA_MPLS_BOS={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x1084, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0xbf0e24e9df967230, 0x8, 0x6}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x200, 0x0, 0x80000001, 0x1}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x8, 0x3, 0xfff}, 0x39}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x1038, 0x14, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x17df}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xe5296cbd86e2585f}}}}, @m_pedit={0xf6c, 0x8, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x200, 0x800, 0x6, 0x6, 0x14}, 0x1, 0x4, [{0xff, 0x8, 0x3ff, 0x9, 0x8000, 0x6}, {0x10000, 0x4, 0x8, 0x2, 0x20, 0xd4}]}, [{0x1000, 0x7, 0x7, 0x3ff, 0x0, 0x9}, {0xfffffff7, 0x4, 0x81, 0x80, 0x6a72ceb2, 0x80}, {0x800, 0x0, 0x80000001, 0x1f, 0x3fd7, 0x2}, {0x6, 0x9, 0x4, 0x5, 0x7f, 0x4}, {0x3, 0x1, 0x4, 0x80, 0x2, 0xad34}, {0x5, 0x4a, 0xfffffffe, 0x7, 0x5, 0x2}, {0x7fff, 0x9, 0xfffffffc, 0x75, 0x10000, 0x8}, {0x7, 0xd98e, 0x4, 0xbd0, 0x4, 0x1}, {0x40, 0x4, 0xeb, 0x4, 0x7fff, 0x5}, {0x7, 0x7, 0xf91, 0x7f, 0x3, 0x3}, {0xa5, 0xde98, 0x71, 0x8001, 0x3ff, 0x5}, {0x100, 0x1, 0x6, 0x6273, 0x4, 0x7f}, {0xe72, 0x6, 0x7ff, 0x3f, 0xffff8001, 0x2}, {0x0, 0x9, 0x40, 0x5, 0x2, 0x1}, {0xff, 0x7, 0x8, 0x5, 0x101, 0xef9d}, {0x9, 0x5, 0x80000001, 0x5, 0x8, 0x821}, {0x2, 0x7, 0x1, 0xfffffffe, 0x2, 0x2}, {0x10000, 0x800, 0x2, 0x7ff, 0x5, 0xffffffff}, {0x1ff, 0x9, 0x0, 0x1f, 0x7, 0x8}, {0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0xa1}, {0xfffffffe, 0xe5, 0x3, 0x1, 0xfffffffc, 0x10000}, {0xe88, 0x3, 0xae64, 0x5, 0x7, 0x6}, {0x6, 0x800, 0x40, 0x2, 0x800000, 0x6}, {0x3, 0x1, 0x3f, 0x400, 0x1, 0x5}, {0x0, 0x10000, 0x5ed, 0x8, 0x3f, 0x41e}, {0xff, 0x9, 0x7fff, 0x3, 0x7fffffff, 0x1}, {0x7, 0x7, 0x3, 0x9066, 0x1, 0x80}, {0x337, 0x3, 0x6, 0x3, 0x137c54e1}, {0xfff, 0x4, 0xfffffffa, 0x2, 0x100, 0x3}, {0x4, 0x80000001, 0x60000000, 0x1ff, 0xffff78fd, 0x17}, {0x2601, 0x8f3, 0x0, 0xc62, 0x6, 0x67df4cbc}, {0x3f, 0x3, 0x5, 0x188, 0x3, 0x5}, {0x2, 0x3ff, 0x9, 0x1, 0x2, 0x3}, {0xcc, 0x6, 0x0, 0xc9ea, 0x1, 0x2}, {0x6, 0x20, 0x101, 0xff, 0x100, 0x5}, {0x0, 0x80000000, 0x10000, 0x7, 0x7a1, 0x401}, {0x5, 0x1, 0xffff0001, 0x80, 0x4, 0x1}, {0x4b, 0x7b8, 0x0, 0x8, 0x315a, 0x1}, {0x1, 0x0, 0xfffffffc, 0x3, 0x7e9f, 0x3ff}, {0x8, 0x80, 0x7, 0x10001, 0x40, 0x3}, {0x200, 0x9, 0x2, 0x9, 0x1, 0x2}, {0x10001, 0x6, 0x7c71, 0xffffffe1, 0x84, 0x6}, {0x60, 0xfff, 0x1, 0x2, 0xdb, 0x9}, {0x80000000, 0x1, 0x9, 0x1, 0x80, 0x4}, {0x4, 0x8001, 0x7, 0x0, 0x8, 0xfff}, {0x6, 0x8, 0x81, 0x2800000, 0x1, 0x7}, {0x7, 0x460000, 0x1000, 0x2, 0x7, 0x7f}, {0x6, 0x4, 0x4, 0x1, 0x5, 0x4a}, {0x80, 0x4, 0xdab, 0x4, 0x4, 0x29}, {0x5, 0x4, 0x71, 0x0, 0x9, 0x5}, {0x8, 0xff, 0x8, 0x4, 0xe42, 0x8}, {0x53e, 0xa6, 0x6, 0x2, 0x1, 0x489b547c}, {0x5, 0xb07, 0x9, 0x7, 0x10000, 0xff}, {0xfffffff7, 0xe12, 0x9, 0x6, 0x2, 0x9}, {0x3, 0x9dc, 0x3, 0xfffffff7, 0x1f, 0x7f}, {0x8, 0x7, 0x9, 0xffff, 0x5, 0x99}, {0x101, 0x6, 0x8, 0x8000, 0x3ff, 0x4}, {0x80000000, 0x252c, 0x5, 0x3f, 0x9, 0xfffffffd}, {0x1, 0x2, 0x4, 0x1, 0x5, 0x800}, {0x6, 0x7, 0x7ff, 0x7fff, 0x1000, 0xfffffffe}, {0x4912, 0x7ef, 0x5, 0x7, 0x2, 0x100000}, {0x4, 0x6, 0x9, 0xcf37, 0x5, 0x1}, {0x2, 0xffffffff, 0x7ff, 0x7, 0x1, 0x5}, {0x0, 0x800, 0x101, 0x7, 0x0, 0xb5e}, {0xa0000000, 0x7, 0xfffffffd, 0x4, 0x0, 0x20}, {0x4, 0xd31, 0x9a, 0xff, 0x3, 0x1616cb57}, {0x3ff, 0x3, 0x10001, 0x6, 0x8, 0x6}, {0x1, 0x9, 0xffffff01, 0x7ff, 0x4, 0x8}, {0x20, 0xb98, 0xffffff4b, 0xffff69d5, 0xe64, 0xfffffff7}, {0x7, 0x3, 0x101, 0x200, 0x5, 0x3f}, {0x1, 0x9, 0x1, 0x800, 0x1, 0x2897}, {0x101, 0x3, 0x9, 0x40, 0x9, 0xc8}, {0x6, 0xb2, 0x139, 0x1, 0x362, 0x5}, {0xfffffff7, 0x1, 0x4, 0x678, 0x7ff, 0x5}, {0x8, 0x7, 0x2, 0x80000000, 0xffffffe1, 0x9}, {0xff, 0x9, 0x4, 0x1, 0x9, 0x101}, {0xcb9a, 0x6, 0x80000001, 0x2, 0x6, 0xfac}, {0x78, 0x401, 0xec7, 0x3, 0x9, 0x8}, {0x2, 0x7f, 0xfffffffb, 0x51, 0x401, 0x8000}, {0x7fff, 0x9, 0x401, 0x8, 0x7fffffff, 0xca}, {0xf40, 0x59ce, 0x1, 0xfff, 0x5, 0x1ff}, {0x2, 0x200, 0x0, 0x2, 0x7f}, {0x9, 0xfffff28f, 0x2, 0x7, 0x8, 0x9}, {0x94, 0x80000001, 0x3, 0x5, 0x8, 0xffff}, {0x6, 0x3ff, 0x5, 0x3, 0x7fff, 0x2}, {0x80000000, 0x2b7f, 0x8000, 0x9c1, 0x1, 0x341bedba}, {0x7fffffff, 0x2, 0x1ff, 0xf998, 0x1f, 0x7}, {0xd67, 0x6da1, 0x3, 0x401, 0x80000000, 0x9}, {0x7, 0x20, 0xfffffffb, 0x1f, 0x0, 0x5}, {0x101, 0x8000, 0x200, 0x1000, 0x200, 0x7}, {0xffffffc1, 0x9, 0x8, 0x80000000, 0x2, 0x3f}, {0x5, 0x41e, 0x6, 0x7, 0x0, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x200, 0x6}, {0x9, 0x9, 0x80000001, 0x80, 0x9, 0xbf}, {0x68c2, 0x0, 0x7ff, 0x6, 0xfffffffe, 0x3}, {0x7, 0x5, 0x200, 0x8001, 0xfff, 0x3}, {0x3, 0x1000, 0x1, 0x20, 0x6, 0xff}, {0x2, 0x1f, 0x8, 0x5, 0x3, 0x8}, {0x401, 0x80000000, 0x176a, 0x9, 0x6dae, 0x7fff}, {0x7fffffff, 0x0, 0xac1, 0x4, 0x6, 0xcb41c260}, {0x3, 0x6, 0x8, 0xc0000000, 0x0, 0xfffffffb}, {0x84e, 0xff, 0x401, 0x5, 0x9, 0x9c}, {0x3, 0x8000, 0x10000, 0x1, 0x8001, 0x7f}, {0x2, 0x8, 0x0, 0x8, 0x6, 0x7}, {0x0, 0xa0b8, 0x80000000, 0x1, 0xffff, 0x3}, {0xff, 0xdfc2, 0x2, 0x8001, 0x400, 0x1f}, {0x10001, 0x9d45, 0x3, 0x8, 0x8, 0x8}, {0xd1, 0x7, 0x8, 0x20, 0x5, 0x3}, {0x2, 0x2, 0x9, 0xad8, 0x3, 0x4}, {0x5, 0x7, 0x67d6, 0x80, 0xdb4, 0x5}, {0x2, 0xfffffffd, 0x1aab, 0xfffffffa, 0x2, 0xfff}, {0x0, 0x400, 0x24e, 0x9, 0x48, 0x101}, {0x2, 0x1, 0x3, 0x4, 0x7}, {0x6, 0x67, 0x400, 0x37, 0x6, 0x1}, {0x7fffffff, 0x5, 0x400, 0x0, 0x1, 0xe6eb}, {0x7ff, 0x9, 0x3f, 0x5, 0x10001, 0x4}, {0x1, 0x9cc, 0x8, 0x40000, 0x6, 0x1}, {0xff, 0x44, 0x9e86, 0xe6, 0xfffffff9, 0x1}, {0x1, 0x1, 0x7f, 0x2, 0x0, 0x5}, {0x3, 0x7, 0xe52e, 0x8f3f, 0x3, 0x2}, {0x5, 0x6, 0x3, 0x1, 0x6}, {0x7, 0x3f0, 0x0, 0x101, 0xff, 0x40}, {0x1, 0x80000000, 0x40, 0x7ff, 0x6, 0x6}, {0x7a, 0x400, 0x6, 0x1, 0x3, 0x2}, {0x1, 0x674, 0x80c, 0xc9, 0x2, 0x9}, {0x1, 0xfff, 0x3, 0x3, 0x400, 0x4}, {0x6, 0xb8b9, 0x1, 0xfffffbff, 0xf26b, 0x80}, {0x3f, 0x345, 0x9, 0xe0d, 0x6, 0x7fff}], [{0x1}, {}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5}], 0x1}}]}, {0xee, 0x6, "c2b44cae482244e87a93db7a64ce8254494f7e3412a0af5eff7a58050347b79bb0b6dff1f7f6d60cee905853522043e19539153903f0bedd383443a55fa3631e542c290247af4d56f6ae6d635e2c4226ee496e53a05150e57cbcd7f3b86420708d338dc863562573fce676bfec15b74e709d7cb46b24b03db0e727f4c174952940f9aea587611f8d9f3802325bd096abc08c329dc80c34b233c754f77b90819f6daa1252333f9b3607d24b9f678324bb0c43e248e4654fc405879092d7cfa32ce754ee1d80f7ce1dc88ca9590b097c0772459ee5ab333dd900aac8fb6961849dd7e55b60aecc794a4613"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1050, 0x12, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1c, 0xa3f0, 0x0, 0xc51, 0x3}, 0x3, r1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x1798, 0x1, [@m_xt={0x268, 0x19, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x1e4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xd0, 0x6, {0x1, 'raw\x00', 0x85, 0x8, "07a1ff0beb148f591ee6de638693a9279fa1976fe8c6c67dce882cf77ecd2ba7d5f269fc1361defdd28ec0eae2cf4f3d51f6e7cbb08fae1fe99fc786f9ac8a1961391cb4dd0ec9066d35dc9cafcc3bcd33861b2990812a31cd1c4e53c59783ef0e13e4aa91c7a7170bfa38e4999496d753be7c0ab58042437480a768b1cefb559b772c9ced1fd0502845c75eef08535f1c72996184912e9edcd2ca694da1d751f5f3015a0b03"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe2, 0x6, {0x9, 'mangle\x00', 0x8, 0x9, "fb0ca645aa6462ea39b4b932e903aa3b3b7e4aec2a6c0d0e73af94959f96fa1c5aa60c614e4a6dee452955eb8fa94de87e9c4c80e80a90152c3fd50a89c0bb43c04ab8179f64033011f2b7b07b67b217d27d830fb510528c4a56a64f9a4a465ee1106026d1b1dc822793a545bc4c804902d9d094979c4f9d3282b6ba80294e7428d1a253a318a794d6d86219f765bd38327dc5ccfc8e1bb9c393dac8c72a7f2c36eb4a1b2415d39083ff5ef1660fea7814408135af3837ce"}}]}, {0x5f, 0x6, "4f76ac0a08a66488607054604479792a3c33b35be8d2d4f2fd89a2c3cbfb04a03f5416e5f404f8468af6e4559f819fecd4347e345376a5aa1f7d341d1cbae269b6d4a7695d643c134e27e4b8109ef5439e4028bdf59e6cd3d0fd73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x70, 0x15, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x8, 0x0, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x1d, 0x6, "beeeccba711167532fc461ddf5607529ca60e10f41397b63eb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0xa8, 0xa, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x4d, 0x6, {0x9, 'security\x00', 0x8c, 0x4, "5712e098a06c93d5b93513a7490f1be63d2504439d6dcf10c6e09ef96bbe7f5f7bc740"}}]}, {0x27, 0x6, "78571333a9641822dce24763dee53e4cc22a786d02b54f79400a93237412e47f56c2a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1054, 0x9, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x101, 0x5, 0x7, 0x8}, @rand_addr=0x64010100, @multicast2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_xt={0x1c0, 0xc, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xcd, 0x6, {0x0, 'mangle\x00', 0x3, 0x1, "f78d8d3dc33c16c97754dbb3ecfa4ce8b900195d0aba326efc849ffb819e92e1e536eaa935479cdd53377dcb077a7910e28f096f51127d33d2e3ec55220da40493e156e3083087a9ee90565436fc3d7ae0aa5a3895b19bbf3e1e999713fd14ef5ebfec5db5af839010b6d26c913903556e40757acd6172985ab047e79c873a52b8f7f7b024d5a407ce314a9326c33b005e5709d100dadc5d8e782883fcdfee71ecd033"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_TARG={0x53, 0x6, {0x7f, 'raw\x00', 0x3, 0x2, "337195009a5372fde57ecbe36689fee8cb59b7977523a7765bbcd3a506caca58c8c0605bef06d067c8"}}]}, {0x3d, 0x6, "053ce128fab25507403480cb48175b47e19ecef4e8d7d803545409d97b6de20fac0acf9565d65fc46be5325c00fe5478a235749c6bdd7b23fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x138, 0x20, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x1, 0x2, 0x7, 0x40800}, {0x9, 0x8, 0x7, 0x8}, {0x7f7, 0x7a, 0x81, 0xffffffff}, {0x1f8, 0x0, 0x1, 0x5}, {0x3, 0x6, 0x7, 0x4}, {0x4, 0xa8, 0x3, 0x7}, {0x1f6, 0x0, 0x6, 0xe}, {0x9648, 0x0, 0x0, 0x39}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x1, 0x20, 0x8001}, {0x2, 0x20, 0x20, 0x1000}, {0xfffd, 0x90}, {0x200, 0x8, 0x4, 0x3}, {0x4, 0x1, 0x7, 0xff}, {0x5, 0x0, 0x0, 0x140000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x1, 0x20000000, 0x1, 0x3}}]}, {0x7d, 0x6, "5690a6030719b76512ca17792cb3e3458c9b519382f2343682458198dbb30700f9cd5d4e64ea6eb22ec95656577650f1f87f3bcb237d7a0c10c583015f19737e9fa6552af9c558cf5ba928cce5a4018a7537c24d6257d22eb4b7577de674dba25a1d3e524828bf29e74bd27b6728f4ca920f3fb2cac56e434a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xc8, 0x15, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}]}, {0x92, 0x6, "a42a0f1d4baf09661874ba3c899b26699c053ed069703613439a7c4a76e783702c5f07fbc0f9ba869213f0d19f32e91109a965ea792c3e0c83e26e95c8a0525a1b17651efac9424b975c68b390702836bcc6ab7654393947c2bad585461b8a8fab3198c2c45f5fe2841ab7d8c5cab23305fa174931c0194b38dd1fbe4b2b2d406f20ea93a5d753ad8703c81f115a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x3fc, 0x1, [@m_vlan={0x158, 0x19, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xbda1, 0x7, 0x7, 0x5}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x68, 0x1, 0x8, 0x9, 0x31}, 0x2}}]}, {0xf1, 0x6, "36e925ede14956909f68391fcc9b3c3fb7416528f6406266aaf66f3236d091e90407d18731fb7c3777ba30a8907d7bec8fdde76cb86a7381e5ae8c867344b2775c84e4f62f332633ff662f61fe93b1830eb2f5d22eab904db77fa4fbc0b8dcb32f3cda0787fae7c2e6e51b130eebd4b764d6d407204c3ecfebd3658095d0ac3f30bd462085e0e104a41ce9c387bbfeb295653c65afd999ceb1e73a4e2ff108d74b880938fea8d60375517d8a5c4a0b43a4166cddf7b17e1a930428aaa2e0fd9d4487b810095756c08a8a54da2c57151162192d5ea9b2bf42fa40b9b36d902d01539c479cf0ebad4620d5bef0eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x9c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x5, 0x5, 0x10000}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x9, 0x0, 0x18}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x9, 0x8, 0x100, 0x401}, 0x73}}]}, {0x1c, 0x6, "6237ebfedccde7678020ef6e8f22bd9bf82b5b4fed07eb2f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xbc, 0x1c, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0x7fff, 0x10000000, 0x1, 0x3}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x8, 0x8dd, 0x9}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x8, 0x2, 0x7}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f8, 0x1, 0x10000000, 0x101, 0x3}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x10001, 0x1, 0x1ff, 0x4}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x50, 0x13, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x6, 0xffffffffffffffff, 0x100, 0xffff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8000}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xf8, 0x6, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x400, 0x7, 0x200, 0x8000}, 0x2}}]}, {0xae, 0x6, "9c091969b7b78516af3ccc06cc532cd6e7c00d5c5d352b092cb37b71e86b8e1d08c463464f2aa6b879a2addc9f420c1ab6a9c9fa77ecb427b2c927906245c80d4b07967b612b7c26af9c2535c4d53cfa55f1505a789f363802c9d4c3ffeb5146e6f66e82be6a0d4d9987e6cf000710461e1ee40e92b25da9683720b667f5ff947d2db839525938d5452da4f916f1ec2b0f42abedb6d58ec00ff0f4ced910632891e997a9e1521e72c839"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6d14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8010) 13:07:22 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [], 0x109}}, 0xfffffffe}) 13:07:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) 13:07:22 executing program 0: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0xffffffff, 0x0, 0x1c0, 0x3e8, 0xffffffff, 0xffffffff, 0x4e8, 0x4e8, 0x4e8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x88, 0x3f, 0x2, 0x1, 0x7, @private2={0xfc, 0x2, [], 0x1}, @empty, @dev={0xfe, 0x80, [], 0x31}, [0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffff], 0x200, 0x4}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x100, 0x7, 0x0, [0x1000, 0xf80, 0xff, 0xb419, 0x8, 0x8, 0x401, 0x6, 0x8, 0x4c, 0x5343, 0x18, 0x3, 0xffff, 0xfff8, 0x2], 0x6}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x7, 0x10001, 0x4c79, 0x0, 0x9, 0x1, 0xffffffff]}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x4, [0x2, 0xff], 0x4, 0x20, 0x1, [@loopback, @private0={0xfc, 0x0, [], 0x1}, @empty, @private1={0xfc, 0x1, [], 0x1}, @loopback, @mcast1, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @loopback, @local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @private0={0xfc, 0x0, [], 0x1}], 0x10}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x3d, {0x1}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x20, 0x82}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0xc}, {0x2, 0x6, 0x4}, 0x3, 0x800}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000001c0)={0xfffffff9, 0x6}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r2, r3, 0x4}, 0x10) [ 2073.383871] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2073.482300] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2073.511040] CPU: 1 PID: 22763 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2073.518948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2073.528386] Call Trace: [ 2073.530977] dump_stack+0x1b2/0x281 [ 2073.534610] warn_alloc.cold+0x96/0x1cc [ 2073.538593] ? zone_watermark_ok_safe+0x220/0x220 [ 2073.543445] ? trace_hardirqs_on+0x10/0x10 [ 2073.547682] ? deref_stack_reg+0x124/0x1a0 [ 2073.551921] ? fs_reclaim_release+0xd0/0x110 [ 2073.556346] __vmalloc_node_range+0x10e/0x150 [ 2073.560847] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2073.566212] vmalloc_user+0x47/0xa0 [ 2073.569839] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2073.574159] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2073.579607] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2073.583746] __vb2_queue_alloc+0x47a/0xd90 [ 2073.587983] vb2_core_create_bufs+0x279/0x5a0 [ 2073.592467] ? __vb2_queue_free+0x7a0/0x7a0 [ 2073.596771] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2073.602123] ? trace_hardirqs_on+0x10/0x10 [ 2073.606342] vb2_create_bufs+0x2e1/0x5b0 [ 2073.610384] ? vb2_thread_start+0x310/0x310 [ 2073.614708] v4l_create_bufs+0xa4/0x150 [ 2073.618671] __video_do_ioctl+0x65b/0x6a0 [ 2073.622808] ? video_ioctl2+0x30/0x30 [ 2073.626621] ? __might_fault+0x177/0x1b0 [ 2073.630661] ? video_ioctl2+0x30/0x30 [ 2073.634443] video_usercopy+0xfd/0xe70 [ 2073.638321] ? v4l_g_ctrl+0x390/0x390 [ 2073.642109] ? lock_acquire+0x170/0x3f0 [ 2073.646078] ? lock_downgrade+0x740/0x740 [ 2073.650211] ? trace_hardirqs_on+0x10/0x10 [ 2073.654429] ? futex_exit_release+0x220/0x220 [ 2073.658914] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2073.664047] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2073.669051] v4l2_ioctl+0x1bb/0x2f0 [ 2073.672659] ? v4l2_open+0x2f0/0x2f0 [ 2073.676350] do_vfs_ioctl+0x75a/0xff0 [ 2073.680172] ? ioctl_preallocate+0x1a0/0x1a0 [ 2073.684621] ? lock_downgrade+0x740/0x740 [ 2073.688761] ? __fget+0x225/0x360 [ 2073.692205] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.696226] ? security_file_ioctl+0x83/0xb0 [ 2073.700648] SyS_ioctl+0x7f/0xb0 [ 2073.703991] ? do_vfs_ioctl+0xff0/0xff0 [ 2073.707953] do_syscall_64+0x1d5/0x640 13:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 13:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2073.711829] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2073.717003] RIP: 0033:0x466459 [ 2073.720181] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2073.727875] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2073.735148] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2073.742401] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2073.749669] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2073.756917] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2073.781897] warn_alloc_show_mem: 1 callbacks suppressed [ 2073.781901] Mem-Info: [ 2073.803131] active_anon:85655 inactive_anon:27052 isolated_anon:0 [ 2073.803131] active_file:2232 inactive_file:8733 isolated_file:0 [ 2073.803131] unevictable:0 dirty:369 writeback:0 unstable:0 [ 2073.803131] slab_reclaimable:14406 slab_unreclaimable:127937 [ 2073.803131] mapped:59295 shmem:27412 pagetables:6898 bounce:0 [ 2073.803131] free:1356544 free_pcp:190 free_cma:0 [ 2073.862040] Node 0 active_anon:344528kB inactive_anon:59440kB active_file:4872kB inactive_file:32724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233340kB dirty:1424kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2073.911309] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4340kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2073.947732] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2073.976344] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2073.982165] Node 0 DMA32 free:1435716kB min:36200kB low:45248kB high:54296kB active_anon:342276kB inactive_anon:59436kB active_file:4872kB inactive_file:32724kB unevictable:0kB writepending:1424kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15488kB pagetables:27372kB bounce:0kB free_pcp:1136kB local_pcp:572kB free_cma:0kB [ 2074.013195] lowmem_reserve[]: 0 0 0 0 0 [ 2074.017721] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2074.044023] lowmem_reserve[]: 0 0 0 0 0 [ 2074.048349] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2074.077100] lowmem_reserve[]: 0 0 0 0 0 [ 2074.081089] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2074.095948] Node 0 DMA32: 1196*4kB (UME) 357*8kB (UME) 3015*16kB (UME) 2558*32kB (UME) 4257*64kB (UM) 2136*128kB (UM) 761*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1435464kB [ 2074.114117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2074.124914] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2074.143389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2074.152342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:22 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:22 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff], [], 0x109}}, 0xfffffffe}) 13:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 13:07:22 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:07:22 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2074.161000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2074.170423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2074.179075] 35444 total pagecache pages [ 2074.183167] 0 pages in swap cache [ 2074.186603] Swap cache stats: add 0, delete 0, find 0/0 [ 2074.192025] Free swap = 0kB [ 2074.195034] Total swap = 0kB [ 2074.198118] 2097051 pages RAM [ 2074.201294] 0 pages HighMem/MovableOnly [ 2074.205250] 363849 pages reserved [ 2074.208751] 0 pages cma reserved 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 13:07:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2074.308017] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2074.331292] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2074.342344] CPU: 1 PID: 22811 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2074.350262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.359614] Call Trace: [ 2074.362213] dump_stack+0x1b2/0x281 [ 2074.365851] warn_alloc.cold+0x96/0x1cc [ 2074.369831] ? zone_watermark_ok_safe+0x220/0x220 [ 2074.374714] ? trace_hardirqs_on+0x10/0x10 [ 2074.378945] ? deref_stack_reg+0x124/0x1a0 [ 2074.383186] ? fs_reclaim_release+0xd0/0x110 [ 2074.387599] __vmalloc_node_range+0x10e/0x150 [ 2074.392128] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2074.397491] vmalloc_user+0x47/0xa0 [ 2074.401114] ? vb2_vmalloc_alloc+0xa6/0x2d0 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2074.405432] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2074.410795] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2074.414942] __vb2_queue_alloc+0x47a/0xd90 [ 2074.419223] vb2_core_create_bufs+0x279/0x5a0 [ 2074.423730] ? __vb2_queue_free+0x7a0/0x7a0 [ 2074.428059] ? futex_wait+0x42f/0x5a0 [ 2074.431861] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2074.437240] ? trace_hardirqs_on+0x10/0x10 [ 2074.441480] vb2_create_bufs+0x2e1/0x5b0 [ 2074.445547] ? vb2_thread_start+0x310/0x310 [ 2074.449870] ? futex_wait+0x42f/0x5a0 [ 2074.453672] v4l_create_bufs+0xa4/0x150 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3, 0x2, 0x1f, 0x9, 0x0, 0xffffffffffffffff, 0xc1800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x9}, 0x2010, 0x2, 0x0, 0x2, 0x7, 0xfff, 0xffff}, r5, 0xa, r6, 0x10) [ 2074.457688] __video_do_ioctl+0x65b/0x6a0 [ 2074.461846] ? video_ioctl2+0x30/0x30 [ 2074.465650] ? __might_fault+0x177/0x1b0 [ 2074.469714] ? video_ioctl2+0x30/0x30 [ 2074.473517] video_usercopy+0xfd/0xe70 [ 2074.477413] ? v4l_g_ctrl+0x390/0x390 [ 2074.481214] ? lock_acquire+0x170/0x3f0 [ 2074.485190] ? lock_downgrade+0x740/0x740 [ 2074.489341] ? trace_hardirqs_on+0x10/0x10 [ 2074.493603] ? futex_exit_release+0x220/0x220 [ 2074.498189] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2074.503293] ? debug_check_no_obj_freed+0x2c0/0x680 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) [ 2074.508312] v4l2_ioctl+0x1bb/0x2f0 [ 2074.511940] ? v4l2_open+0x2f0/0x2f0 [ 2074.515656] do_vfs_ioctl+0x75a/0xff0 [ 2074.519461] ? ioctl_preallocate+0x1a0/0x1a0 [ 2074.523869] ? lock_downgrade+0x740/0x740 [ 2074.528022] ? __fget+0x225/0x360 [ 2074.531472] ? do_vfs_ioctl+0xff0/0xff0 [ 2074.535473] ? security_file_ioctl+0x83/0xb0 [ 2074.539881] SyS_ioctl+0x7f/0xb0 [ 2074.543248] ? do_vfs_ioctl+0xff0/0xff0 [ 2074.547229] do_syscall_64+0x1d5/0x640 [ 2074.551124] entry_SYSCALL_64_after_hwframe+0x46/0xbb 13:07:23 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2074.556319] RIP: 0033:0x466459 [ 2074.559506] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2074.567211] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2074.574483] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2074.581753] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2074.589021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2074.596291] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:23 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff]}}, 0xfffffffe}) 13:07:23 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x503000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x519000, 0x0) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x2a000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) 13:07:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2074.715897] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2074.737429] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2074.742583] CPU: 0 PID: 22846 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2074.750462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2074.759812] Call Trace: [ 2074.762401] dump_stack+0x1b2/0x281 [ 2074.766032] warn_alloc.cold+0x96/0x1cc [ 2074.770010] ? zone_watermark_ok_safe+0x220/0x220 [ 2074.774871] ? trace_hardirqs_on+0x10/0x10 [ 2074.779129] ? deref_stack_reg+0x124/0x1a0 [ 2074.783368] ? fs_reclaim_release+0xd0/0x110 [ 2074.787807] __vmalloc_node_range+0x10e/0x150 [ 2074.792306] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2074.797666] vmalloc_user+0x47/0xa0 [ 2074.801301] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2074.805623] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2074.810985] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2074.815135] __vb2_queue_alloc+0x47a/0xd90 [ 2074.819378] vb2_core_create_bufs+0x279/0x5a0 [ 2074.823874] ? __vb2_queue_free+0x7a0/0x7a0 [ 2074.828223] ? futex_wait+0x42f/0x5a0 [ 2074.832070] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2074.837432] ? trace_hardirqs_on+0x10/0x10 [ 2074.841670] vb2_create_bufs+0x2e1/0x5b0 [ 2074.845735] ? vb2_thread_start+0x310/0x310 [ 2074.850056] ? futex_wait+0x42f/0x5a0 [ 2074.853867] v4l_create_bufs+0xa4/0x150 [ 2074.857858] __video_do_ioctl+0x65b/0x6a0 [ 2074.862019] ? video_ioctl2+0x30/0x30 13:07:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) 13:07:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x80, 0xb1, 0x1, 0x9, 0x0, 0x3, 0x10000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x4, 0x8001, 0x3, 0x0, 0x7, 0xec, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) getpid() 13:07:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2074.865829] ? __might_fault+0x177/0x1b0 [ 2074.869890] ? video_ioctl2+0x30/0x30 [ 2074.873693] video_usercopy+0xfd/0xe70 [ 2074.877585] ? v4l_g_ctrl+0x390/0x390 [ 2074.881383] ? lock_acquire+0x170/0x3f0 [ 2074.885351] ? lock_downgrade+0x740/0x740 [ 2074.889501] ? trace_hardirqs_on+0x10/0x10 [ 2074.893742] ? futex_exit_release+0x220/0x220 [ 2074.898238] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2074.903345] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2074.908370] v4l2_ioctl+0x1bb/0x2f0 [ 2074.912001] ? v4l2_open+0x2f0/0x2f0 [ 2074.915720] do_vfs_ioctl+0x75a/0xff0 [ 2074.919525] ? ioctl_preallocate+0x1a0/0x1a0 [ 2074.923932] ? lock_downgrade+0x740/0x740 [ 2074.928088] ? __fget+0x225/0x360 [ 2074.931538] ? do_vfs_ioctl+0xff0/0xff0 [ 2074.935510] ? security_file_ioctl+0x83/0xb0 [ 2074.939916] SyS_ioctl+0x7f/0xb0 [ 2074.943278] ? do_vfs_ioctl+0xff0/0xff0 [ 2074.947253] do_syscall_64+0x1d5/0x640 [ 2074.951142] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2074.956326] RIP: 0033:0x466459 [ 2074.959543] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2074.967250] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2074.974510] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2074.981765] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2074.989012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2074.996261] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2075.034124] warn_alloc_show_mem: 1 callbacks suppressed [ 2075.034129] Mem-Info: [ 2075.044540] active_anon:85785 inactive_anon:27053 isolated_anon:0 [ 2075.044540] active_file:2236 inactive_file:8734 isolated_file:0 [ 2075.044540] unevictable:0 dirty:379 writeback:0 unstable:0 [ 2075.044540] slab_reclaimable:14406 slab_unreclaimable:127670 [ 2075.044540] mapped:59408 shmem:27412 pagetables:6910 bounce:0 [ 2075.044540] free:1356507 free_pcp:320 free_cma:0 [ 2075.082908] Node 0 active_anon:342748kB inactive_anon:59444kB active_file:4888kB inactive_file:32728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233328kB dirty:1464kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2075.112271] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2075.140808] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.167059] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2075.172091] Node 0 DMA32 free:1437176kB min:36200kB low:45248kB high:54296kB active_anon:342212kB inactive_anon:59440kB active_file:4892kB inactive_file:32764kB unevictable:0kB writepending:1508kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15488kB pagetables:27344kB bounce:0kB free_pcp:1328kB local_pcp:636kB free_cma:0kB [ 2075.202329] lowmem_reserve[]: 0 0 0 0 0 [ 2075.206317] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.231941] lowmem_reserve[]: 0 0 0 0 0 [ 2075.235933] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2075.264659] lowmem_reserve[]: 0 0 0 0 0 [ 2075.269320] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2075.284282] Node 0 DMA32: 1270*4kB (UME) 393*8kB (UME) 3029*16kB (UME) 2577*32kB (UME) 4255*64kB (UM) 2136*128kB (UM) 762*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1437008kB [ 2075.302464] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2075.313279] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2075.331841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.340746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2075.349402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2075.358298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2075.366863] 35457 total pagecache pages [ 2075.370913] 0 pages in swap cache [ 2075.374365] Swap cache stats: add 0, delete 0, find 0/0 [ 2075.379775] Free swap = 0kB [ 2075.382787] Total swap = 0kB 13:07:24 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x0, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:24 executing program 0: ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f00000000c0)={{&(0x7f0000000380)={'Accelerator1\x00', {&(0x7f0000000000)=@adf_str={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {"c32345a10217dbd368dd165ef82c92009990b6adde522fa6e578df48949b4aeea55ac85e757772a242e1bcb83c39e8d8215e91bb9ce74c7a3715711cfd4be5bd"}}}, {&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000240)=@adf_str={@format={'Dc', '5', 'NumConcurrentSymRequests\x00'}, {"61c01af9e8ec5880c1b4b56942078d9ce690937cd0d47356cd475d04506add1c0915648ce1a81bc8c3009507a8c2fc3a5f3372d644bd96f42ce9822ad60d9d56"}, {&(0x7f0000000180)=@adf_str={@normal='NumberDcInstances\x00', {"f10a7becc99fc337d286dbe7da8344af903ae506d19f7a1e5cd4d7b8dda04d113d105978b9f7289cc79f9114a53f2e34a165db89cb95079ad86515081aad9f83"}}}}}}}}}, 0x80}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:24 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff]}}, 0xfffffffe}) 13:07:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) getpid() 13:07:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2075.385815] 2097051 pages RAM [ 2075.388981] 0 pages HighMem/MovableOnly [ 2075.392948] 363849 pages reserved [ 2075.396385] 0 pages cma reserved 13:07:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) 13:07:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:24 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0x300, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r1}, 0xc) [ 2075.465650] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2075.531811] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2075.544044] CPU: 1 PID: 22892 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2075.551941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.561325] Call Trace: [ 2075.563915] dump_stack+0x1b2/0x281 [ 2075.567547] warn_alloc.cold+0x96/0x1cc [ 2075.571518] ? zone_watermark_ok_safe+0x220/0x220 [ 2075.576358] ? trace_hardirqs_on+0x10/0x10 [ 2075.580593] ? deref_stack_reg+0x124/0x1a0 [ 2075.584830] ? fs_reclaim_release+0xd0/0x110 [ 2075.589242] __vmalloc_node_range+0x10e/0x150 [ 2075.593748] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2075.599110] vmalloc_user+0x47/0xa0 [ 2075.602738] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2075.607057] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2075.612420] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2075.616566] __vb2_queue_alloc+0x47a/0xd90 [ 2075.620813] vb2_core_create_bufs+0x279/0x5a0 [ 2075.625307] ? __vb2_queue_free+0x7a0/0x7a0 13:07:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x9}, 0x4220, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1c, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x4}) 13:07:24 executing program 0: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1405, 0x400, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x15}, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0x1, @raw_data="2e74d4f14a2633b4098bcaaa356bdc56fbbf31f5e02b9ac46208d23f07733a550087ab9749376754c9c26579e386ec38e326a50fd099f4a720795ed2afc4607665a54e99934afbddd03087cc8def1b0664b4c8d39df54a02790a4186504b75629258ae2c8d8bd4e83732a17c1af93cb2eee46897e9e64e8ec4401e15668ab103af77eb37c0b2d4d619df89078ba0324dd7ba1c42435faa15a465958ea0f72de5c4cfbaddede9e024f649f8d5e8b188d575743a4bc58ffeaeea4e6c4763fb97413399dbc7a5000059"}) [ 2075.629635] ? futex_wait+0x42f/0x5a0 [ 2075.633436] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2075.638803] ? trace_hardirqs_on+0x10/0x10 [ 2075.643041] vb2_create_bufs+0x2e1/0x5b0 [ 2075.647106] ? vb2_thread_start+0x310/0x310 [ 2075.651430] ? futex_wait+0x42f/0x5a0 [ 2075.655244] v4l_create_bufs+0xa4/0x150 [ 2075.659218] __video_do_ioctl+0x65b/0x6a0 [ 2075.663388] ? video_ioctl2+0x30/0x30 [ 2075.667213] ? __might_fault+0x177/0x1b0 [ 2075.671281] ? video_ioctl2+0x30/0x30 [ 2075.675083] video_usercopy+0xfd/0xe70 [ 2075.678978] ? v4l_g_ctrl+0x390/0x390 [ 2075.682786] ? lock_acquire+0x170/0x3f0 [ 2075.686764] ? lock_downgrade+0x740/0x740 [ 2075.690928] ? trace_hardirqs_on+0x10/0x10 [ 2075.695171] ? futex_exit_release+0x220/0x220 [ 2075.699670] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2075.704773] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2075.709796] v4l2_ioctl+0x1bb/0x2f0 [ 2075.713425] ? v4l2_open+0x2f0/0x2f0 [ 2075.717140] do_vfs_ioctl+0x75a/0xff0 [ 2075.720945] ? ioctl_preallocate+0x1a0/0x1a0 [ 2075.725351] ? lock_downgrade+0x740/0x740 [ 2075.729507] ? __fget+0x225/0x360 [ 2075.732961] ? do_vfs_ioctl+0xff0/0xff0 [ 2075.736942] ? security_file_ioctl+0x83/0xb0 [ 2075.741346] SyS_ioctl+0x7f/0xb0 [ 2075.744706] ? do_vfs_ioctl+0xff0/0xff0 [ 2075.748680] do_syscall_64+0x1d5/0x640 [ 2075.752573] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2075.757786] RIP: 0033:0x466459 [ 2075.760973] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2075.768681] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2075.775946] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 13:07:24 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:24 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff]}}, 0xfffffffe}) 13:07:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) 13:07:24 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2075.783209] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2075.790477] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2075.797742] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 13:07:24 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) [ 2075.905559] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) [ 2075.946638] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2075.955802] CPU: 1 PID: 22931 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2075.963691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2075.973042] Call Trace: [ 2075.975635] dump_stack+0x1b2/0x281 [ 2075.979270] warn_alloc.cold+0x96/0x1cc [ 2075.983244] ? zone_watermark_ok_safe+0x220/0x220 [ 2075.988087] ? trace_hardirqs_on+0x10/0x10 [ 2075.992349] ? deref_stack_reg+0x124/0x1a0 [ 2075.996588] ? fs_reclaim_release+0xd0/0x110 [ 2076.001001] __vmalloc_node_range+0x10e/0x150 [ 2076.005506] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2076.010872] vmalloc_user+0x47/0xa0 [ 2076.014502] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2076.018825] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2076.024209] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2076.028356] __vb2_queue_alloc+0x47a/0xd90 [ 2076.032598] vb2_core_create_bufs+0x279/0x5a0 [ 2076.037097] ? __vb2_queue_free+0x7a0/0x7a0 [ 2076.041420] ? futex_wait+0x42f/0x5a0 13:07:24 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x4, 0x7, 0x0, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x0, 0xffffffff, 0x4}}) getuid() [ 2076.045220] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2076.050584] ? trace_hardirqs_on+0x10/0x10 [ 2076.054816] vb2_create_bufs+0x2e1/0x5b0 [ 2076.058879] ? vb2_thread_start+0x310/0x310 [ 2076.063198] ? futex_wait+0x42f/0x5a0 [ 2076.067004] v4l_create_bufs+0xa4/0x150 [ 2076.070978] __video_do_ioctl+0x65b/0x6a0 [ 2076.075133] ? video_ioctl2+0x30/0x30 [ 2076.078933] ? __might_fault+0x177/0x1b0 [ 2076.082992] ? video_ioctl2+0x30/0x30 [ 2076.086796] video_usercopy+0xfd/0xe70 [ 2076.090689] ? v4l_g_ctrl+0x390/0x390 [ 2076.094496] ? lock_acquire+0x170/0x3f0 [ 2076.098471] ? lock_downgrade+0x740/0x740 [ 2076.102618] ? trace_hardirqs_on+0x10/0x10 [ 2076.106854] ? futex_exit_release+0x220/0x220 [ 2076.111354] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2076.116458] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2076.121478] v4l2_ioctl+0x1bb/0x2f0 [ 2076.125108] ? v4l2_open+0x2f0/0x2f0 [ 2076.128822] do_vfs_ioctl+0x75a/0xff0 [ 2076.132626] ? ioctl_preallocate+0x1a0/0x1a0 [ 2076.137035] ? lock_downgrade+0x740/0x740 [ 2076.141193] ? __fget+0x225/0x360 13:07:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "201192c5ded2db4ef20b004d0f3dbeb4"}, 0x18) [ 2076.144678] ? do_vfs_ioctl+0xff0/0xff0 [ 2076.148663] ? security_file_ioctl+0x83/0xb0 [ 2076.153077] SyS_ioctl+0x7f/0xb0 [ 2076.156443] ? do_vfs_ioctl+0xff0/0xff0 [ 2076.160418] do_syscall_64+0x1d5/0x640 [ 2076.164309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2076.169511] RIP: 0033:0x466459 [ 2076.172697] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2076.180405] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2076.187671] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 13:07:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) 13:07:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2076.194940] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2076.202214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2076.209484] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) [ 2076.286225] warn_alloc_show_mem: 1 callbacks suppressed [ 2076.286229] Mem-Info: [ 2076.294196] active_anon:85699 inactive_anon:27052 isolated_anon:0 [ 2076.294196] active_file:2237 inactive_file:8751 isolated_file:0 [ 2076.294196] unevictable:0 dirty:398 writeback:0 unstable:0 [ 2076.294196] slab_reclaimable:14395 slab_unreclaimable:127783 [ 2076.294196] mapped:59453 shmem:27412 pagetables:6904 bounce:0 [ 2076.294196] free:1356441 free_pcp:266 free_cma:0 [ 2076.364004] Node 0 active_anon:342568kB inactive_anon:59440kB active_file:4892kB inactive_file:32796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233444kB dirty:1540kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2076.394319] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4368kB dirty:52kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2076.423406] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2076.457127] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2076.462341] Node 0 DMA32 free:1435404kB min:36200kB low:45248kB high:54296kB active_anon:342728kB inactive_anon:59440kB active_file:4892kB inactive_file:32796kB unevictable:0kB writepending:1540kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15616kB pagetables:27616kB bounce:0kB free_pcp:1032kB local_pcp:692kB free_cma:0kB [ 2076.493689] lowmem_reserve[]: 0 0 0 0 0 [ 2076.497866] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2076.524673] lowmem_reserve[]: 0 0 0 0 0 [ 2076.528752] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2076.557548] lowmem_reserve[]: 0 0 0 0 0 [ 2076.561542] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2076.576311] Node 0 DMA32: 1214*4kB (UME) 375*8kB (UME) 2981*16kB (UME) 2583*32kB (UME) 4252*64kB (U) 2137*128kB (UM) 763*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1436256kB [ 2076.594338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2076.605094] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2076.624091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.633016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2076.641651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.650535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2076.659229] 35468 total pagecache pages 13:07:25 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x0, 0x0, 0x0, [0x0, 0xffffffff]}}}) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 13:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:25 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = semget(0x2, 0x4, 0xc0) semctl$IPC_RMID(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f00000003c0)=0xe8) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000004c0)={{0x0, r2, 0xffffffffffffffff, r3, r4, 0x4, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd44}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1407, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4004001) 13:07:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2076.663195] 0 pages in swap cache [ 2076.666624] Swap cache stats: add 0, delete 0, find 0/0 [ 2076.672034] Free swap = 0kB [ 2076.675045] Total swap = 0kB [ 2076.678256] 2097051 pages RAM [ 2076.681354] 0 pages HighMem/MovableOnly [ 2076.685309] 363849 pages reserved [ 2076.688840] 0 pages cma reserved 13:07:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x7) 13:07:25 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) [ 2076.788790] syz-executor.3: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2076.814451] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2076.819872] CPU: 1 PID: 22984 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2076.827788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:07:25 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2076.837137] Call Trace: [ 2076.839738] dump_stack+0x1b2/0x281 [ 2076.843369] warn_alloc.cold+0x96/0x1cc [ 2076.847348] ? zone_watermark_ok_safe+0x220/0x220 [ 2076.852190] ? trace_hardirqs_on+0x10/0x10 [ 2076.856432] ? deref_stack_reg+0x124/0x1a0 [ 2076.860671] ? fs_reclaim_release+0xd0/0x110 [ 2076.865089] __vmalloc_node_range+0x10e/0x150 [ 2076.869594] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2076.874957] vmalloc_user+0x47/0xa0 [ 2076.878587] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2076.882904] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2076.888268] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2076.892422] __vb2_queue_alloc+0x47a/0xd90 [ 2076.896670] vb2_core_create_bufs+0x279/0x5a0 [ 2076.901161] ? __vb2_queue_free+0x7a0/0x7a0 [ 2076.905484] ? futex_wait+0x42f/0x5a0 [ 2076.909285] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2076.914647] ? trace_hardirqs_on+0x10/0x10 [ 2076.918888] vb2_create_bufs+0x2e1/0x5b0 [ 2076.922956] ? vb2_thread_start+0x310/0x310 [ 2076.927293] ? futex_wait+0x42f/0x5a0 [ 2076.931097] v4l_create_bufs+0xa4/0x150 [ 2076.935075] __video_do_ioctl+0x65b/0x6a0 [ 2076.939252] ? video_ioctl2+0x30/0x30 [ 2076.943062] ? __might_fault+0x177/0x1b0 [ 2076.947126] ? video_ioctl2+0x30/0x30 [ 2076.950929] video_usercopy+0xfd/0xe70 [ 2076.954821] ? v4l_g_ctrl+0x390/0x390 [ 2076.958626] ? lock_acquire+0x170/0x3f0 [ 2076.962721] ? lock_downgrade+0x740/0x740 [ 2076.966875] ? trace_hardirqs_on+0x10/0x10 [ 2076.971110] ? futex_exit_release+0x220/0x220 [ 2076.975608] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2076.980717] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2076.985738] v4l2_ioctl+0x1bb/0x2f0 [ 2076.989364] ? v4l2_open+0x2f0/0x2f0 [ 2076.993082] do_vfs_ioctl+0x75a/0xff0 [ 2076.996883] ? ioctl_preallocate+0x1a0/0x1a0 [ 2077.001291] ? lock_downgrade+0x740/0x740 [ 2077.005444] ? __fget+0x225/0x360 [ 2077.008899] ? do_vfs_ioctl+0xff0/0xff0 [ 2077.012872] ? security_file_ioctl+0x83/0xb0 [ 2077.017280] SyS_ioctl+0x7f/0xb0 [ 2077.020643] ? do_vfs_ioctl+0xff0/0xff0 [ 2077.024623] do_syscall_64+0x1d5/0x640 [ 2077.028519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2077.033701] RIP: 0033:0x466459 [ 2077.036886] RSP: 002b:00007f893f483188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2077.044596] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2077.051865] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2077.059128] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2077.066403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2077.073682] R13: 00007ffd8a6b350f R14: 00007f893f483300 R15: 0000000000022000 13:07:25 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xb}, {0x0, 0xc}, {0xf, 0x1d}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:25 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x7fffffff, 0x2, 0x1}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2077.201109] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2077.274189] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2077.283767] CPU: 1 PID: 23016 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2077.291665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2077.301015] Call Trace: [ 2077.303620] dump_stack+0x1b2/0x281 [ 2077.307256] warn_alloc.cold+0x96/0x1cc [ 2077.311236] ? zone_watermark_ok_safe+0x220/0x220 [ 2077.316126] ? trace_hardirqs_on+0x10/0x10 [ 2077.320403] ? deref_stack_reg+0x124/0x1a0 [ 2077.324646] ? fs_reclaim_release+0xd0/0x110 [ 2077.329060] __vmalloc_node_range+0x10e/0x150 [ 2077.333560] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2077.338923] vmalloc_user+0x47/0xa0 [ 2077.342557] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2077.346880] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2077.352250] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2077.356399] __vb2_queue_alloc+0x47a/0xd90 [ 2077.360646] vb2_core_create_bufs+0x279/0x5a0 [ 2077.365146] ? __vb2_queue_free+0x7a0/0x7a0 [ 2077.369474] ? futex_wait+0x42f/0x5a0 13:07:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x62, 0x2, 0x0, 0x0, 0xfff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x18202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x6, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) [ 2077.373274] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2077.378639] ? trace_hardirqs_on+0x10/0x10 [ 2077.382878] vb2_create_bufs+0x2e1/0x5b0 [ 2077.386947] ? vb2_thread_start+0x310/0x310 [ 2077.391272] ? futex_wait+0x42f/0x5a0 [ 2077.395081] v4l_create_bufs+0xa4/0x150 [ 2077.399056] __video_do_ioctl+0x65b/0x6a0 [ 2077.403211] ? video_ioctl2+0x30/0x30 [ 2077.407010] ? __might_fault+0x177/0x1b0 [ 2077.411073] ? video_ioctl2+0x30/0x30 [ 2077.414871] video_usercopy+0xfd/0xe70 [ 2077.418766] ? v4l_g_ctrl+0x390/0x390 [ 2077.422569] ? lock_acquire+0x170/0x3f0 [ 2077.426590] ? lock_downgrade+0x740/0x740 [ 2077.430738] ? trace_hardirqs_on+0x10/0x10 [ 2077.434975] ? futex_exit_release+0x220/0x220 [ 2077.439476] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2077.444578] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2077.449591] v4l2_ioctl+0x1bb/0x2f0 [ 2077.453212] ? v4l2_open+0x2f0/0x2f0 [ 2077.456925] do_vfs_ioctl+0x75a/0xff0 [ 2077.460729] ? ioctl_preallocate+0x1a0/0x1a0 [ 2077.465137] ? lock_downgrade+0x740/0x740 [ 2077.469286] ? __fget+0x225/0x360 [ 2077.472737] ? do_vfs_ioctl+0xff0/0xff0 [ 2077.476709] ? security_file_ioctl+0x83/0xb0 [ 2077.481121] SyS_ioctl+0x7f/0xb0 [ 2077.484485] ? do_vfs_ioctl+0xff0/0xff0 [ 2077.488464] do_syscall_64+0x1d5/0x640 [ 2077.492357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2077.497543] RIP: 0033:0x466459 [ 2077.500730] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2077.508438] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2077.515702] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2077.522961] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2077.530219] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2077.537475] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2077.560300] warn_alloc_show_mem: 1 callbacks suppressed [ 2077.560304] Mem-Info: [ 2077.580538] active_anon:85130 inactive_anon:27052 isolated_anon:0 [ 2077.580538] active_file:2237 inactive_file:8754 isolated_file:0 [ 2077.580538] unevictable:0 dirty:409 writeback:0 unstable:0 [ 2077.580538] slab_reclaimable:14391 slab_unreclaimable:127923 [ 2077.580538] mapped:59409 shmem:27412 pagetables:6827 bounce:0 [ 2077.580538] free:1357066 free_pcp:299 free_cma:0 [ 2077.625105] Node 0 active_anon:340328kB inactive_anon:59440kB active_file:4892kB inactive_file:32808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233360kB dirty:1580kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2077.654020] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4212kB dirty:56kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2077.682349] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2077.709362] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2077.714384] Node 0 DMA32 free:1439884kB min:36200kB low:45248kB high:54296kB active_anon:340004kB inactive_anon:59444kB active_file:4892kB inactive_file:32808kB unevictable:0kB writepending:1580kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15424kB pagetables:27304kB bounce:0kB free_pcp:1216kB local_pcp:568kB free_cma:0kB [ 2077.745488] lowmem_reserve[]: 0 0 0 0 0 [ 2077.749652] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2077.776211] lowmem_reserve[]: 0 0 0 0 0 [ 2077.780400] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2077.809232] lowmem_reserve[]: 0 0 0 0 0 [ 2077.813260] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2077.828130] Node 0 DMA32: 1278*4kB (UME) 417*8kB (UME) 2974*16kB (UME) 2594*32kB (UME) 4247*64kB (U) 2137*128kB (UM) 766*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 106*2048kB (UM) 0*4096kB = 1439584kB [ 2077.846634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2077.857465] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB 13:07:26 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1], 0x109}}, 0xfffffffe}) 13:07:26 executing program 0: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0xc, 0x0, [], [@pad1]}, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "201192c5ded2db4ef20b004d0f3dbeb4"}, 0x18) 13:07:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2077.875868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2077.884776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2077.893414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2077.902318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2077.910946] 35479 total pagecache pages [ 2077.914928] 0 pages in swap cache [ 2077.918441] Swap cache stats: add 0, delete 0, find 0/0 [ 2077.923794] Free swap = 0kB [ 2077.926806] Total swap = 0kB [ 2077.929872] 2097051 pages RAM [ 2077.932967] 0 pages HighMem/MovableOnly [ 2077.936920] 363849 pages reserved [ 2077.940462] 0 pages cma reserved [ 2077.991241] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2078.017245] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2078.029499] CPU: 0 PID: 23060 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2078.037418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.046814] Call Trace: [ 2078.049407] dump_stack+0x1b2/0x281 [ 2078.053042] warn_alloc.cold+0x96/0x1cc [ 2078.057023] ? zone_watermark_ok_safe+0x220/0x220 [ 2078.061865] ? trace_hardirqs_on+0x10/0x10 [ 2078.066100] ? deref_stack_reg+0x124/0x1a0 [ 2078.070340] ? fs_reclaim_release+0xd0/0x110 [ 2078.074756] __vmalloc_node_range+0x10e/0x150 [ 2078.079262] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.084630] vmalloc_user+0x47/0xa0 [ 2078.088265] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.092587] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.097953] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.102107] __vb2_queue_alloc+0x47a/0xd90 [ 2078.106359] vb2_core_create_bufs+0x279/0x5a0 [ 2078.110867] ? __vb2_queue_free+0x7a0/0x7a0 [ 2078.115200] ? futex_wait+0x42f/0x5a0 [ 2078.119003] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.124371] ? trace_hardirqs_on+0x10/0x10 [ 2078.128619] vb2_create_bufs+0x2e1/0x5b0 [ 2078.132685] ? vb2_thread_start+0x310/0x310 [ 2078.137036] ? futex_wait+0x42f/0x5a0 [ 2078.140844] v4l_create_bufs+0xa4/0x150 [ 2078.144822] __video_do_ioctl+0x65b/0x6a0 [ 2078.148977] ? video_ioctl2+0x30/0x30 [ 2078.152780] ? __might_fault+0x177/0x1b0 [ 2078.156844] ? video_ioctl2+0x30/0x30 [ 2078.160644] video_usercopy+0xfd/0xe70 [ 2078.164538] ? v4l_g_ctrl+0x390/0x390 [ 2078.168338] ? lock_acquire+0x170/0x3f0 [ 2078.172322] ? lock_downgrade+0x740/0x740 [ 2078.176476] ? trace_hardirqs_on+0x10/0x10 [ 2078.180741] ? futex_exit_release+0x220/0x220 [ 2078.185242] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2078.190349] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2078.195374] v4l2_ioctl+0x1bb/0x2f0 [ 2078.199004] ? v4l2_open+0x2f0/0x2f0 [ 2078.202719] do_vfs_ioctl+0x75a/0xff0 [ 2078.206559] ? ioctl_preallocate+0x1a0/0x1a0 [ 2078.210970] ? lock_downgrade+0x740/0x740 [ 2078.215126] ? __fget+0x225/0x360 [ 2078.218580] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.222571] ? security_file_ioctl+0x83/0xb0 [ 2078.226980] SyS_ioctl+0x7f/0xb0 [ 2078.230345] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.234322] do_syscall_64+0x1d5/0x640 13:07:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) 13:07:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:26 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2078.238220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.243406] RIP: 0033:0x466459 [ 2078.246609] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.254318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2078.261587] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2078.268854] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2078.276119] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2078.283384] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x1, 0x1, 0x9, 0x8, 0x0, 0x4, 0x5000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x101, 0x3}, 0x90, 0x1000, 0x1, 0x9, 0x3f, 0x13a2, 0x3}, 0xffffffffffffffff, 0x1, r4, 0x8) r5 = getpid() getpgid(r5) 13:07:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0xfffff801, {{0xa, 0x4e22, 0x100, @empty, 0xaa84}}}, 0x88) 13:07:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x10040, 0x0) 13:07:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:27 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2078.581205] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2078.635156] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2078.653396] CPU: 1 PID: 23121 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2078.661297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.670649] Call Trace: [ 2078.673238] dump_stack+0x1b2/0x281 [ 2078.676868] warn_alloc.cold+0x96/0x1cc [ 2078.680845] ? zone_watermark_ok_safe+0x220/0x220 [ 2078.685687] ? trace_hardirqs_on+0x10/0x10 [ 2078.689924] ? deref_stack_reg+0x124/0x1a0 [ 2078.694181] ? fs_reclaim_release+0xd0/0x110 [ 2078.698596] __vmalloc_node_range+0x10e/0x150 [ 2078.703091] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.708465] vmalloc_user+0x47/0xa0 [ 2078.712123] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.716455] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2078.721815] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2078.725962] __vb2_queue_alloc+0x47a/0xd90 [ 2078.730207] vb2_core_create_bufs+0x279/0x5a0 [ 2078.734705] ? __vb2_queue_free+0x7a0/0x7a0 [ 2078.739030] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.744405] ? trace_hardirqs_on+0x10/0x10 [ 2078.748645] vb2_create_bufs+0x2e1/0x5b0 [ 2078.752739] ? vb2_thread_start+0x310/0x310 [ 2078.757073] v4l_create_bufs+0xa4/0x150 [ 2078.761049] __video_do_ioctl+0x65b/0x6a0 [ 2078.765202] ? video_ioctl2+0x30/0x30 [ 2078.769004] ? __might_fault+0x177/0x1b0 [ 2078.773066] ? video_ioctl2+0x30/0x30 [ 2078.776869] video_usercopy+0xfd/0xe70 [ 2078.780770] ? finish_task_switch+0x150/0x610 [ 2078.785266] ? finish_task_switch+0x14d/0x610 [ 2078.789768] ? v4l_g_ctrl+0x390/0x390 [ 2078.793571] ? __schedule+0x893/0x1de0 [ 2078.797468] ? rcu_read_unlock_special+0x8db/0xdd0 [ 2078.802408] v4l2_ioctl+0x1bb/0x2f0 [ 2078.806035] ? v4l2_open+0x2f0/0x2f0 [ 2078.809749] do_vfs_ioctl+0x75a/0xff0 [ 2078.813557] ? ioctl_preallocate+0x1a0/0x1a0 [ 2078.817966] ? lock_downgrade+0x740/0x740 [ 2078.822150] ? __fget+0x225/0x360 [ 2078.825607] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.829582] ? security_file_ioctl+0x83/0xb0 [ 2078.834078] SyS_ioctl+0x7f/0xb0 [ 2078.837434] ? do_vfs_ioctl+0xff0/0xff0 [ 2078.841407] do_syscall_64+0x1d5/0x640 [ 2078.845294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2078.850463] RIP: 0033:0x466459 [ 2078.853646] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2078.861332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2078.868580] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2078.875830] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2078.883079] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2078.890336] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2078.908427] warn_alloc_show_mem: 1 callbacks suppressed [ 2078.908432] Mem-Info: [ 2078.916239] active_anon:85651 inactive_anon:27052 isolated_anon:0 [ 2078.916239] active_file:2237 inactive_file:8772 isolated_file:0 [ 2078.916239] unevictable:0 dirty:427 writeback:0 unstable:0 [ 2078.916239] slab_reclaimable:14404 slab_unreclaimable:127852 [ 2078.916239] mapped:59359 shmem:27412 pagetables:6842 bounce:0 [ 2078.916239] free:1356401 free_pcp:264 free_cma:0 [ 2078.952401] Node 0 active_anon:342212kB inactive_anon:59440kB active_file:4892kB inactive_file:32880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233196kB dirty:1616kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2078.981609] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4240kB dirty:92kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2079.009435] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.035734] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2079.041338] Node 0 DMA32 free:1436860kB min:36200kB low:45248kB high:54296kB active_anon:342212kB inactive_anon:59440kB active_file:4892kB inactive_file:32880kB unevictable:0kB writepending:1576kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15488kB pagetables:27368kB bounce:0kB free_pcp:1012kB local_pcp:392kB free_cma:0kB [ 2079.071565] lowmem_reserve[]: 0 0 0 0 0 [ 2079.075560] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.101196] lowmem_reserve[]: 0 0 0 0 0 [ 2079.105198] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:92kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2079.133935] lowmem_reserve[]: 0 0 0 0 0 [ 2079.137987] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2079.152765] Node 0 DMA32: 1359*4kB (UME) 824*8kB (UME) 2811*16kB (UME) 2586*32kB (UE) 4250*64kB (U) 2136*128kB (U) 766*256kB (UM) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1438316kB [ 2079.171937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2079.182719] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2079.201109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.210007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2079.218650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2079.227540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 13:07:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:28 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x0, 0x2], 0x109}}, 0xfffffffe}) 13:07:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x48000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2079.236103] 35486 total pagecache pages [ 2079.240195] 0 pages in swap cache [ 2079.243655] Swap cache stats: add 0, delete 0, find 0/0 [ 2079.249063] Free swap = 0kB [ 2079.252074] Total swap = 0kB [ 2079.255076] 2097051 pages RAM [ 2079.258241] 0 pages HighMem/MovableOnly [ 2079.262242] 363849 pages reserved [ 2079.265668] 0 pages cma reserved 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2]}}, 0xfffffffe}) 13:07:28 executing program 0: r0 = getuid() semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, 0xffffffffffffffff, 0xee00, 0xee00, 0x1, 0x401}, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7fff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000000000)="ddbf7371fc635b3a207d3c1c4583a094682590f11efe22c0641cd97f7a97c823afc6ff2bb2c0cc0561e05dbf986b1a1964c0d006b3be8c89747df5eef36330ac8fb22f5736e9d2f93ef2b9d972c520b3771d1abfaaf89f4c7dda12a47aa02ca4d92f3ff15541b25dd7370ee42bf4c126eb394cb269533bb20568bd9b8935d6fefd8b4e4857a7646581443949a50a438415e27372168c53ee34ed912405256145594498d27c9faead4b06d062e48893d203ac660e5c922abd34974f7a9c74aba674679ac1776e1dc6b3", 0xc9, 0x4080, 0x0, 0x0) 13:07:28 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:28 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xc0, 0x4d, &(0x7f0000000000)="2bc8877652f007cb9ab82a6f8ffdfd54a3bb1d37fc58d32d406b57d8b127e500740090b0022433689a4e4846cbf421769d35ad591c132fbccd0a1fedd51b300d3106bdd8f0f99b4bcd036f2195a67414143c547d756612b818b97a6940189f8871e3d227c9e4d5dff80133c8a20eea7b381e2950d0f8f751c2b6d606806c5c091f4b1b05a640c1dcfb29a0a06bd9a63b0bc949b786479a09526dfe55135fbeae856469af37d1ad117459ef88655a9b58d679fd15091ddd384f9d85575f638010", &(0x7f0000000180)=""/77, 0x20, 0x0, 0xa1, 0x44, &(0x7f0000000200)="e8975b551ba55046f4c13a62a33f495cbe3fc6076d5afc57234af7a3b3a59105f6c823b7405ce3c15201b3e95efac9532ec94821e0ab6c93bd9c56902e3e181c02668de1c9dfaecf23823bc5c45fc2f04633617282202c472a5160f9965396d7a0b3d3f496d6085a6ab1a84dd4915172e5da6529b5ab3b8476217a3c2c464f51237436b9917e0eba23146f201a42cd5e389cfba504a2a1fbe9508e564fd46755d3", &(0x7f00000002c0)="34a72b73080968538a9c02fbc0b5d958b4c606b045d8f2c367c18ae8afdc2259b4107121fd379e7852b3d169f3869fb760fb0d6991fb3acc5be48524110c5781e72674f8", 0x1, 0xfffffffb}, 0x48) [ 2079.780319] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2079.826404] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2079.851441] CPU: 1 PID: 23197 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2079.859374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2079.868731] Call Trace: [ 2079.871333] dump_stack+0x1b2/0x281 [ 2079.874968] warn_alloc.cold+0x96/0x1cc [ 2079.878950] ? zone_watermark_ok_safe+0x220/0x220 [ 2079.883793] ? trace_hardirqs_on+0x10/0x10 [ 2079.888031] ? deref_stack_reg+0x124/0x1a0 [ 2079.892275] ? fs_reclaim_release+0xd0/0x110 [ 2079.896693] __vmalloc_node_range+0x10e/0x150 [ 2079.901191] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2079.906550] vmalloc_user+0x47/0xa0 [ 2079.910178] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2079.914492] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2079.919871] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2079.924051] __vb2_queue_alloc+0x47a/0xd90 [ 2079.928312] vb2_core_create_bufs+0x279/0x5a0 [ 2079.932822] ? __vb2_queue_free+0x7a0/0x7a0 [ 2079.937136] ? futex_wait+0x42f/0x5a0 [ 2079.940925] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2079.946268] ? trace_hardirqs_on+0x10/0x10 [ 2079.950484] vb2_create_bufs+0x2e1/0x5b0 [ 2079.954526] ? vb2_thread_start+0x310/0x310 [ 2079.958829] ? futex_wait+0x42f/0x5a0 [ 2079.962617] v4l_create_bufs+0xa4/0x150 [ 2079.966577] __video_do_ioctl+0x65b/0x6a0 [ 2079.970719] ? video_ioctl2+0x30/0x30 [ 2079.974500] ? __might_fault+0x177/0x1b0 [ 2079.978539] ? video_ioctl2+0x30/0x30 [ 2079.982321] video_usercopy+0xfd/0xe70 [ 2079.986191] ? v4l_g_ctrl+0x390/0x390 [ 2079.990010] ? lock_acquire+0x170/0x3f0 [ 2079.993965] ? lock_downgrade+0x740/0x740 [ 2079.998118] ? trace_hardirqs_on+0x10/0x10 [ 2080.002334] ? futex_exit_release+0x220/0x220 [ 2080.006810] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2080.011896] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2080.016895] v4l2_ioctl+0x1bb/0x2f0 [ 2080.020504] ? v4l2_open+0x2f0/0x2f0 [ 2080.024214] do_vfs_ioctl+0x75a/0xff0 [ 2080.027994] ? ioctl_preallocate+0x1a0/0x1a0 [ 2080.032397] ? lock_downgrade+0x740/0x740 [ 2080.036527] ? __fget+0x225/0x360 [ 2080.039961] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.043918] ? security_file_ioctl+0x83/0xb0 [ 2080.048315] SyS_ioctl+0x7f/0xb0 13:07:28 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) [ 2080.051676] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.055660] do_syscall_64+0x1d5/0x640 [ 2080.059534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2080.064726] RIP: 0033:0x466459 [ 2080.067911] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2080.075610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2080.082874] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2080.090138] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2080.097400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2080.104661] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2080.131972] Mem-Info: [ 2080.139089] active_anon:85652 inactive_anon:27052 isolated_anon:0 [ 2080.139089] active_file:2237 inactive_file:8780 isolated_file:0 [ 2080.139089] unevictable:0 dirty:435 writeback:0 unstable:0 [ 2080.139089] slab_reclaimable:14410 slab_unreclaimable:127618 [ 2080.139089] mapped:59379 shmem:27412 pagetables:6858 bounce:0 [ 2080.139089] free:1356684 free_pcp:259 free_cma:0 [ 2080.221852] Node 0 active_anon:344744kB inactive_anon:59440kB active_file:4892kB inactive_file:32912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233712kB dirty:1684kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.256379] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:56kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2080.291320] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.317679] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2080.322821] Node 0 DMA32 free:1438268kB min:36200kB low:45248kB high:54296kB active_anon:342324kB inactive_anon:59440kB active_file:4892kB inactive_file:32912kB unevictable:0kB writepending:1684kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15488kB pagetables:27432kB bounce:0kB free_pcp:1348kB local_pcp:632kB free_cma:0kB [ 2080.354028] lowmem_reserve[]: 0 0 0 0 0 [ 2080.359128] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.387169] lowmem_reserve[]: 0 0 0 0 0 [ 2080.391656] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2080.421343] lowmem_reserve[]: 0 0 0 0 0 [ 2080.425413] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2080.440716] Node 0 DMA32: 1364*4kB (UME) 1585*8kB (UME) 2853*16kB (UME) 2379*32kB (UME) 4251*64kB (UM) 2137*128kB (UM) 765*256kB (U) 354*512kB (UM) 157*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1438408kB [ 2080.459400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2080.470577] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2080.489265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2080.499158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.507970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:29 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2]}}, 0xfffffffe}) 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:29 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2080.517060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2080.525984] 35491 total pagecache pages [ 2080.530109] 0 pages in swap cache [ 2080.533562] Swap cache stats: add 0, delete 0, find 0/0 [ 2080.539447] Free swap = 0kB [ 2080.542459] Total swap = 0kB [ 2080.545480] 2097051 pages RAM [ 2080.549298] 0 pages HighMem/MovableOnly [ 2080.553269] 363849 pages reserved [ 2080.556699] 0 pages cma reserved 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:29 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2080.623948] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2080.653758] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2080.660449] CPU: 1 PID: 23250 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 13:07:29 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x8f, 0xf0, 0x6, 0x0, 0x0, 0x1488, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x1, 0xb43}, 0xc402, 0xc17, 0x1a4, 0x1, 0x0, 0x8e, 0x5}, 0xffffffffffffffff, 0x2, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1, 0x8, 0x7f, 0x1, 0x0, 0x5, 0x1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x2}, 0x10000, 0x9, 0x8, 0x1, 0x5, 0x9, 0x9}, 0xffffffffffffffff, 0xd, r1, 0xa) [ 2080.668363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2080.679281] Call Trace: [ 2080.681877] dump_stack+0x1b2/0x281 [ 2080.685515] warn_alloc.cold+0x96/0x1cc [ 2080.689493] ? zone_watermark_ok_safe+0x220/0x220 [ 2080.694337] ? trace_hardirqs_on+0x10/0x10 [ 2080.698576] ? deref_stack_reg+0x124/0x1a0 [ 2080.702815] ? fs_reclaim_release+0xd0/0x110 [ 2080.707350] __vmalloc_node_range+0x10e/0x150 [ 2080.711851] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2080.717221] vmalloc_user+0x47/0xa0 [ 2080.720852] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2080.725173] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2080.730537] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2080.734688] __vb2_queue_alloc+0x47a/0xd90 [ 2080.738942] vb2_core_create_bufs+0x279/0x5a0 [ 2080.743466] ? __vb2_queue_free+0x7a0/0x7a0 [ 2080.747791] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2080.753677] ? trace_hardirqs_on+0x10/0x10 [ 2080.757922] vb2_create_bufs+0x2e1/0x5b0 [ 2080.761986] ? vb2_thread_start+0x310/0x310 [ 2080.766315] v4l_create_bufs+0xa4/0x150 [ 2080.770992] __video_do_ioctl+0x65b/0x6a0 13:07:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) [ 2080.775145] ? video_ioctl2+0x30/0x30 [ 2080.779131] ? __might_fault+0x177/0x1b0 [ 2080.783191] ? video_ioctl2+0x30/0x30 [ 2080.786990] video_usercopy+0xfd/0xe70 [ 2080.790883] ? v4l_g_ctrl+0x390/0x390 [ 2080.794687] ? lock_acquire+0x170/0x3f0 [ 2080.798669] ? lock_downgrade+0x740/0x740 [ 2080.802817] ? trace_hardirqs_on+0x10/0x10 [ 2080.807140] ? futex_exit_release+0x220/0x220 [ 2080.812197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2080.817395] ? debug_check_no_obj_freed+0x2c0/0x680 13:07:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) [ 2080.822794] v4l2_ioctl+0x1bb/0x2f0 [ 2080.826424] ? v4l2_open+0x2f0/0x2f0 [ 2080.830163] do_vfs_ioctl+0x75a/0xff0 [ 2080.834314] ? ioctl_preallocate+0x1a0/0x1a0 [ 2080.838728] ? lock_downgrade+0x740/0x740 [ 2080.843226] ? __fget+0x225/0x360 [ 2080.846683] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.850665] ? security_file_ioctl+0x83/0xb0 [ 2080.855160] SyS_ioctl+0x7f/0xb0 [ 2080.858528] ? do_vfs_ioctl+0xff0/0xff0 [ 2080.862504] do_syscall_64+0x1d5/0x640 [ 2080.867436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2080.872796] RIP: 0033:0x466459 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) [ 2080.875979] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2080.883688] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2080.890958] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2080.898315] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2080.905584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2080.912857] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 13:07:29 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2]}}, 0xfffffffe}) 13:07:29 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x4, 0x2, &(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0]}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x40000) 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}}) 13:07:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:29 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:30 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}}) 13:07:30 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:30 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:30 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:30 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:30 executing program 1: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x2, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}}) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:30 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) [ 2081.705389] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) 13:07:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2081.780378] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2081.796789] CPU: 1 PID: 23374 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2081.804683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2081.814063] Call Trace: [ 2081.816655] dump_stack+0x1b2/0x281 [ 2081.820287] warn_alloc.cold+0x96/0x1cc [ 2081.824264] ? zone_watermark_ok_safe+0x220/0x220 [ 2081.829107] ? trace_hardirqs_on+0x10/0x10 [ 2081.833339] ? deref_stack_reg+0x124/0x1a0 [ 2081.837577] ? fs_reclaim_release+0xd0/0x110 [ 2081.842015] __vmalloc_node_range+0x10e/0x150 [ 2081.846515] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2081.851875] vmalloc_user+0x47/0xa0 [ 2081.855503] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2081.859821] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2081.865208] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2081.869361] __vb2_queue_alloc+0x47a/0xd90 [ 2081.873605] vb2_core_create_bufs+0x279/0x5a0 [ 2081.878104] ? __vb2_queue_free+0x7a0/0x7a0 [ 2081.882428] ? futex_wait+0x42f/0x5a0 [ 2081.886226] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2081.891586] ? trace_hardirqs_on+0x10/0x10 [ 2081.895823] vb2_create_bufs+0x2e1/0x5b0 [ 2081.899889] ? vb2_thread_start+0x310/0x310 [ 2081.904211] ? futex_wait+0x42f/0x5a0 [ 2081.908018] v4l_create_bufs+0xa4/0x150 [ 2081.911995] __video_do_ioctl+0x65b/0x6a0 [ 2081.916145] ? video_ioctl2+0x30/0x30 [ 2081.919946] ? __might_fault+0x177/0x1b0 [ 2081.924010] ? video_ioctl2+0x30/0x30 [ 2081.927810] video_usercopy+0xfd/0xe70 [ 2081.931709] ? v4l_g_ctrl+0x390/0x390 [ 2081.935510] ? lock_acquire+0x170/0x3f0 [ 2081.939485] ? lock_downgrade+0x740/0x740 [ 2081.943630] ? trace_hardirqs_on+0x10/0x10 [ 2081.947867] ? futex_exit_release+0x220/0x220 [ 2081.952364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2081.957468] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2081.962485] v4l2_ioctl+0x1bb/0x2f0 [ 2081.966110] ? v4l2_open+0x2f0/0x2f0 [ 2081.969825] do_vfs_ioctl+0x75a/0xff0 [ 2081.973627] ? ioctl_preallocate+0x1a0/0x1a0 [ 2081.978033] ? lock_downgrade+0x740/0x740 [ 2081.982184] ? __fget+0x225/0x360 [ 2081.985644] ? do_vfs_ioctl+0xff0/0xff0 [ 2081.989623] ? security_file_ioctl+0x83/0xb0 [ 2081.994031] SyS_ioctl+0x7f/0xb0 [ 2081.997404] ? do_vfs_ioctl+0xff0/0xff0 [ 2082.001380] do_syscall_64+0x1d5/0x640 [ 2082.005264] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2082.010434] RIP: 0033:0x466459 [ 2082.013602] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.021291] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2082.028548] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2082.035795] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2082.043044] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2082.050292] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2082.058547] warn_alloc_show_mem: 1 callbacks suppressed [ 2082.058551] Mem-Info: [ 2082.066414] active_anon:85117 inactive_anon:27052 isolated_anon:0 [ 2082.066414] active_file:2237 inactive_file:8791 isolated_file:0 [ 2082.066414] unevictable:0 dirty:450 writeback:0 unstable:0 [ 2082.066414] slab_reclaimable:14439 slab_unreclaimable:127486 [ 2082.066414] mapped:59394 shmem:27412 pagetables:6810 bounce:0 [ 2082.066414] free:1356442 free_pcp:300 free_cma:0 [ 2082.101985] Node 0 active_anon:340076kB inactive_anon:59440kB active_file:4892kB inactive_file:32956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233272kB dirty:1744kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2082.130697] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:56kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2082.158692] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2082.184938] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2082.190563] Node 0 DMA32 free:1437812kB min:36200kB low:45248kB high:54296kB active_anon:340076kB inactive_anon:59440kB active_file:4892kB inactive_file:32956kB unevictable:0kB writepending:1744kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15392kB pagetables:27240kB bounce:0kB free_pcp:1320kB local_pcp:660kB free_cma:0kB [ 2082.220788] lowmem_reserve[]: 0 0 0 0 0 [ 2082.224776] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2082.250361] lowmem_reserve[]: 0 0 0 0 0 [ 2082.254350] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2082.283256] lowmem_reserve[]: 0 0 0 0 0 [ 2082.287310] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2082.302138] Node 0 DMA32: 1347*4kB (UME) 2874*8kB (UME) 2142*16kB (UME) 2320*32kB (UME) 4249*64kB (UM) 2137*128kB (U) 764*256kB (U) 353*512kB (UM) 158*1024kB (UM) 106*2048kB (UM) 0*4096kB = 1437564kB [ 2082.320749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2082.331548] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB [ 2082.349982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2082.358921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2082.367753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 13:07:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) [ 2082.376598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2082.385233] 35502 total pagecache pages [ 2082.389292] 0 pages in swap cache [ 2082.392736] Swap cache stats: add 0, delete 0, find 0/0 [ 2082.398179] Free swap = 0kB [ 2082.401197] Total swap = 0kB [ 2082.404201] 2097051 pages RAM [ 2082.407358] 0 pages HighMem/MovableOnly [ 2082.411427] 363849 pages reserved [ 2082.414854] 0 pages cma reserved 13:07:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:32 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:32 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:33 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x10040, 0x0) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x10040, 0x0) 13:07:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x10040, 0x0) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) 13:07:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, r1, 0x5) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x28000000) 13:07:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x28000000) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:34 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:34 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) 13:07:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x28000000) 13:07:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 4: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 13:07:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x0) 13:07:35 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:35 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) r10 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x111440, 0x0) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) socket$vsock_dgram(0x28, 0x2, 0x0) 13:07:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r9, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2b}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008803) 13:07:35 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r8, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) 13:07:35 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x3, 0x1, 0x67, 0x0, 0xffffffff, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x6dc13d6622bbbdf3, @perf_bp={&(0x7f0000000040)}, 0x1410, 0x9, 0x1f, 0x2, 0x1, 0x7ff, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x28000000) 13:07:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x28000000) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) 13:07:35 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, r0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x28000000) 13:07:35 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) 13:07:35 executing program 2: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x2, @raw_data="989d0c1f0f4182706b0249bbefc1c493b83df7d28f54e25f0fe9c0e60c4c2a0d899bfed009aeb10bc53c820ec1157f546c63b1af2e40605c7d835aa68e242a40bd5f59493687e0339ccca1ac13388f91ccf9878ffc16c6de8583580a25103dc0447239a6e662cdc54dfddf7961c80a3fd5a7419de690a3544d46286dba7ee510eaaa37cb3cedcb1166044136c2ac9d2df51c5ca35261ad14e225d54e4fcbec6aafd82fde2fc9890df57c5e6e37b1b5b987a7ee4cc08f8f1a8b88533df8380f0639cdaf07a06ec578"}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x8001, 0x1, {0x2, @vbi={0x0, 0x1, 0x0, 0x17e62123c8677390, [0x0, 0xffffffff], [0x1, 0x2], 0x109}}, 0xfffffffe}) 13:07:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1}, 0x14}}, 0x28000000) 13:07:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 0: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x28000000) [ 2087.195521] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2087.226954] syz-executor.2 cpuset=/ mems_allowed=0-1 13:07:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) [ 2087.250165] CPU: 0 PID: 24019 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2087.258100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2087.267451] Call Trace: [ 2087.270044] dump_stack+0x1b2/0x281 [ 2087.273675] warn_alloc.cold+0x96/0x1cc [ 2087.277662] ? zone_watermark_ok_safe+0x220/0x220 [ 2087.282510] ? trace_hardirqs_on+0x10/0x10 [ 2087.286745] ? deref_stack_reg+0x124/0x1a0 [ 2087.290986] ? fs_reclaim_release+0xd0/0x110 [ 2087.295403] __vmalloc_node_range+0x10e/0x150 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) [ 2087.299908] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2087.305272] vmalloc_user+0x47/0xa0 [ 2087.308901] ? vb2_vmalloc_alloc+0xa6/0x2d0 [ 2087.313220] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2087.318593] vb2_vmalloc_alloc+0xa6/0x2d0 [ 2087.322746] __vb2_queue_alloc+0x47a/0xd90 [ 2087.327013] vb2_core_create_bufs+0x279/0x5a0 [ 2087.331510] ? __vb2_queue_free+0x7a0/0x7a0 [ 2087.335835] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2087.341202] ? trace_hardirqs_on+0x10/0x10 [ 2087.345440] vb2_create_bufs+0x2e1/0x5b0 [ 2087.349505] ? vb2_thread_start+0x310/0x310 [ 2087.353833] v4l_create_bufs+0xa4/0x150 [ 2087.357807] __video_do_ioctl+0x65b/0x6a0 [ 2087.361958] ? video_ioctl2+0x30/0x30 [ 2087.365763] ? __might_fault+0x177/0x1b0 [ 2087.369829] ? video_ioctl2+0x30/0x30 [ 2087.373641] video_usercopy+0xfd/0xe70 [ 2087.377531] ? v4l_g_ctrl+0x390/0x390 [ 2087.381333] ? lock_acquire+0x170/0x3f0 [ 2087.385304] ? lock_downgrade+0x740/0x740 [ 2087.389451] ? trace_hardirqs_on+0x10/0x10 [ 2087.393686] ? futex_exit_release+0x220/0x220 [ 2087.398188] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2087.403299] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2087.408317] v4l2_ioctl+0x1bb/0x2f0 [ 2087.411949] ? v4l2_open+0x2f0/0x2f0 [ 2087.415664] do_vfs_ioctl+0x75a/0xff0 [ 2087.419472] ? ioctl_preallocate+0x1a0/0x1a0 [ 2087.423877] ? lock_downgrade+0x740/0x740 [ 2087.428110] ? __fget+0x225/0x360 [ 2087.431550] ? do_vfs_ioctl+0xff0/0xff0 [ 2087.435554] ? security_file_ioctl+0x83/0xb0 [ 2087.439942] SyS_ioctl+0x7f/0xb0 [ 2087.443285] ? do_vfs_ioctl+0xff0/0xff0 [ 2087.447240] do_syscall_64+0x1d5/0x640 [ 2087.451114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2087.456282] RIP: 0033:0x466459 [ 2087.459450] RSP: 002b:00007f69f057d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2087.467136] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2087.474389] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 2087.481644] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 2087.488890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2087.496159] R13: 00007ffef019ef2f R14: 00007f69f057d300 R15: 0000000000022000 [ 2087.508640] Mem-Info: [ 2087.511143] active_anon:85638 inactive_anon:27052 isolated_anon:0 [ 2087.511143] active_file:2256 inactive_file:8779 isolated_file:0 [ 2087.511143] unevictable:0 dirty:233 writeback:0 unstable:0 [ 2087.511143] slab_reclaimable:14786 slab_unreclaimable:125490 [ 2087.511143] mapped:59410 shmem:27412 pagetables:6844 bounce:0 [ 2087.511143] free:1357596 free_pcp:359 free_cma:0 [ 2087.555316] Node 0 active_anon:340104kB inactive_anon:59440kB active_file:4968kB inactive_file:32908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:233636kB dirty:876kB writeback:0kB shmem:60496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 241664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2087.584261] Node 1 active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4304kB dirty:56kB writeback:0kB shmem:49152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2087.612125] Node 0 DMA free:15904kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2087.638477] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2087.643510] Node 0 DMA32 free:1444428kB min:36200kB low:45248kB high:54296kB active_anon:340024kB inactive_anon:59440kB active_file:4968kB inactive_file:32908kB unevictable:0kB writepending:880kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:15392kB pagetables:27268kB bounce:0kB free_pcp:1400kB local_pcp:676kB free_cma:0kB [ 2087.673994] lowmem_reserve[]: 0 0 0 0 0 [ 2087.678113] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2087.703784] lowmem_reserve[]: 0 0 0 0 0 [ 2087.707996] Node 1 Normal free:3973460kB min:53696kB low:67120kB high:80544kB active_anon:392kB inactive_anon:48768kB active_file:4056kB inactive_file:2208kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2087.736911] lowmem_reserve[]: 0 0 0 0 0 [ 2087.741005] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15904kB [ 2087.755834] Node 0 DMA32: 1033*4kB (UME) 4381*8kB (UME) 1681*16kB (UME) 2438*32kB (UME) 4242*64kB (UM) 2137*128kB (UM) 770*256kB (UM) 351*512kB (U) 159*1024kB (UM) 106*2048kB (UM) 0*4096kB = 1445852kB [ 2087.773995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2087.784775] Node 1 Normal: 211*4kB (UME) 597*8kB (UME) 496*16kB (UM) 287*32kB (UME) 282*64kB (UME) 236*128kB (UM) 202*256kB (UM) 189*512kB (UME) 168*1024kB (UM) 153*2048kB (UM) 798*4096kB (U) = 3973460kB 13:07:36 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) [ 2087.803173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.812175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.820835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2087.829767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2087.838398] 35512 total pagecache pages [ 2087.842399] 0 pages in swap cache [ 2087.845832] Swap cache stats: add 0, delete 0, find 0/0 [ 2087.851240] Free swap = 0kB 13:07:36 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2b}}, 0x0) 13:07:36 executing program 0: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) [ 2087.854272] Total swap = 0kB [ 2087.857338] 2097051 pages RAM [ 2087.860432] 0 pages HighMem/MovableOnly [ 2087.864382] 363849 pages reserved [ 2087.867889] 0 pages cma reserved 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:36 executing program 0: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:36 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:36 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r4, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb00df2516000077cc02523bd3e36393cb096b26070010fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="000006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfe, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7e0000", @ANYRES16=r3, @ANYBLOB="01009bef334200000000000000000e0000f50800030016a1255526f87b6675caeb3adc6fa8b042fdfe816b08dafad3505b2672dce5f0015a58855dd61b65797adab6b5460cdbfb3fe6b27cd3e90fbf12a93d17e8bd36084bfbd0a66d11f3706aa5608e", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:07:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 13:07:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x988afc4960393e7e, 0x81, 0x6, 0x9, 0x41, @mcast1, @local, 0xadf0d082f2619d89, 0x8, 0x7, 0x4}}) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x4, 0xffff}, {0xe, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x4, 0xffff}, {0xe, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 13:07:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x988afc4960393e7e, 0x81, 0x6, 0x9, 0x41, @mcast1, @local, 0xadf0d082f2619d89, 0x8, 0x7, 0x4}}) 13:07:37 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x28000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{}, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x92, 0x10, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80040, 0x0) 13:07:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, r1, 0xa1fbaf713ea754d3, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004050}, 0x60) 13:07:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x988afc4960393e7e, 0x81, 0x6, 0x9, 0x41, @mcast1, @local, 0xadf0d082f2619d89, 0x8, 0x7, 0x4}}) 13:07:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000005c0)={'syzkaller1\x00'}) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x1f, 0x2, 0x0, 0x1, 0x0, 0x1000, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xed, 0x6}, 0x8002, 0x7f, 0x10001, 0x8, 0xd1f, 0x4, 0x100}, 0x0, 0x1, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7f, 0x5, 0x37, 0x81, 0x0, 0x0, 0x10230, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x5, @perf_config_ext={0x6, 0x702}, 0x8000, 0xadeb, 0x7ff, 0x5, 0x1ff, 0x9, 0x8000}, 0x0, 0xa, r1, 0x3) 13:07:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80040, 0x0) 13:07:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80040, 0x0) 13:07:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, r1, 0xa1fbaf713ea754d3, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004050}, 0x60) 13:07:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 13:07:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x3, 0x0, 0x4}}, 0x26) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 13:07:38 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 1 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 0 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) 13:07:38 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000804}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x7, 0x2}, {0x1, 0xe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4081) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) [ 2089.758711] FAULT_INJECTION: forcing a failure. [ 2089.758711] name failslab, interval 1, probability 0, space 0, times 0 [ 2089.824483] CPU: 0 PID: 24281 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2089.832384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2089.841734] Call Trace: [ 2089.844326] dump_stack+0x1b2/0x281 [ 2089.847959] should_fail.cold+0x10a/0x149 [ 2089.852111] should_failslab+0xd6/0x130 [ 2089.856085] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2089.860756] perf_event_alloc.part.0+0x5b/0x2640 [ 2089.865512] ? __alloc_fd+0x1be/0x490 [ 2089.869324] SyS_perf_event_open+0x67f/0x24b0 13:07:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:38 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) [ 2089.873834] ? perf_bp_event+0x170/0x170 [ 2089.877904] ? do_syscall_64+0x4c/0x640 [ 2089.881887] ? perf_bp_event+0x170/0x170 [ 2089.885961] do_syscall_64+0x1d5/0x640 [ 2089.889858] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2089.895044] RIP: 0033:0x466459 [ 2089.898231] RSP: 002b:00007f8a451a0188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2089.905945] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2089.913241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 2089.920510] RBP: 00007f8a451a01d0 R08: 0000000000000005 R09: 0000000000000000 [ 2089.927776] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2089.935043] R13: 00007ffcc1deafff R14: 00007f8a451a0300 R15: 0000000000022000 [ 2090.022687] FAULT_INJECTION: forcing a failure. [ 2090.022687] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.034441] CPU: 1 PID: 24286 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2090.042338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2090.051697] Call Trace: [ 2090.054297] dump_stack+0x1b2/0x281 [ 2090.057939] should_fail.cold+0x10a/0x149 [ 2090.062104] should_failslab+0xd6/0x130 [ 2090.066094] __kmalloc+0x2c1/0x400 [ 2090.069660] ? dma_buf_export+0x20b/0xa20 [ 2090.073816] dma_buf_export+0x20b/0xa20 [ 2090.077792] vb2_vmalloc_get_dmabuf+0xe6/0x160 [ 2090.082356] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2090.087272] ? mark_held_locks+0xa6/0xf0 [ 2090.091320] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2090.096374] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2090.100896] vb2_core_expbuf+0x287/0x4b0 [ 2090.104938] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2090.109857] __video_do_ioctl+0x456/0x6a0 [ 2090.113995] ? video_ioctl2+0x30/0x30 [ 2090.117774] ? __might_fault+0x177/0x1b0 [ 2090.121991] ? video_ioctl2+0x30/0x30 [ 2090.125769] video_usercopy+0xfd/0xe70 [ 2090.129660] ? v4l_g_ctrl+0x390/0x390 [ 2090.133470] ? trace_hardirqs_on+0x10/0x10 [ 2090.137720] ? fsnotify+0x974/0x11b0 [ 2090.141422] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2090.146329] ? __handle_mm_fault+0x80f/0x4620 [ 2090.150813] v4l2_ioctl+0x1bb/0x2f0 [ 2090.154426] ? v4l2_open+0x2f0/0x2f0 [ 2090.158118] do_vfs_ioctl+0x75a/0xff0 [ 2090.161896] ? ioctl_preallocate+0x1a0/0x1a0 [ 2090.166283] ? lock_downgrade+0x740/0x740 [ 2090.170420] ? __fget+0x225/0x360 [ 2090.173874] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.177827] ? security_file_ioctl+0x83/0xb0 [ 2090.182219] SyS_ioctl+0x7f/0xb0 [ 2090.185567] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.189616] do_syscall_64+0x1d5/0x640 [ 2090.193493] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2090.198659] RIP: 0033:0x466459 [ 2090.201824] RSP: 002b:00007f69f055c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2090.209516] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 13:07:39 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:39 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:39 executing program 1 (fault-call:0 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:39 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x7) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3f, 0x9, 0x4, 0xf8, 0x0, 0x9, 0x80, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0xfffffffffffeffff, 0x4}, 0x1800a, 0x101, 0x81, 0x1, 0x2, 0x2, 0x1}, r1, 0x2, r0, 0x2) [ 2090.216801] RDX: 0000000020000140 RSI: 00000000c0405610 RDI: 0000000000000003 [ 2090.224052] RBP: 00007f69f055c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.231314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2090.238562] R13: 00007ffef019ef2f R14: 00007f69f055c300 R15: 0000000000022000 13:07:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x6, 0xa7, 0x69, 0x1, 0x0, 0x1, 0x8, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x1, 0xffffffffffffffff, 0x800, 0x9, 0x1, 0x3, 0xc519}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) 13:07:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x628000}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x24000800) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1412, 0x4, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4844) 13:07:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 13:07:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x3}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0xd4, 0x2, 0x8, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x3038, 0x100000000, 0x1, 0x4, 0x80000000, 0x2, 0x1}, 0x0, 0x1, r0, 0x3) [ 2090.506274] FAULT_INJECTION: forcing a failure. [ 2090.506274] name failslab, interval 1, probability 0, space 0, times 0 [ 2090.532054] CPU: 1 PID: 24324 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2090.539956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2090.549305] Call Trace: [ 2090.551900] dump_stack+0x1b2/0x281 [ 2090.555533] should_fail.cold+0x10a/0x149 [ 2090.559686] should_failslab+0xd6/0x130 [ 2090.563663] kmem_cache_alloc+0x28e/0x3c0 [ 2090.567813] __d_alloc+0x2a/0xa20 [ 2090.571271] anon_inode_getfile+0x101/0x2f0 [ 2090.575591] ? compat_SyS_epoll_pwait+0x240/0x240 [ 2090.580432] ? __lockdep_init_map+0x100/0x560 [ 2090.584925] ? __lockdep_init_map+0x100/0x560 [ 2090.589424] dma_buf_export+0x4c8/0xa20 [ 2090.593405] vb2_vmalloc_get_dmabuf+0xe6/0x160 [ 2090.597998] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2090.602925] ? mark_held_locks+0xa6/0xf0 [ 2090.606991] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2090.611997] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2090.616474] vb2_core_expbuf+0x287/0x4b0 [ 2090.620521] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2090.625441] __video_do_ioctl+0x456/0x6a0 [ 2090.629587] ? video_ioctl2+0x30/0x30 [ 2090.633366] ? __might_fault+0x177/0x1b0 [ 2090.637413] ? video_ioctl2+0x30/0x30 [ 2090.641199] video_usercopy+0xfd/0xe70 [ 2090.645069] ? v4l_g_ctrl+0x390/0x390 [ 2090.648850] ? trace_hardirqs_on+0x10/0x10 [ 2090.653082] ? fsnotify+0x974/0x11b0 [ 2090.656777] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2090.661683] ? __handle_mm_fault+0x80f/0x4620 [ 2090.666157] v4l2_ioctl+0x1bb/0x2f0 [ 2090.669762] ? v4l2_open+0x2f0/0x2f0 [ 2090.673466] do_vfs_ioctl+0x75a/0xff0 [ 2090.677256] ? ioctl_preallocate+0x1a0/0x1a0 [ 2090.681653] ? lock_downgrade+0x740/0x740 [ 2090.685787] ? __fget+0x225/0x360 [ 2090.689228] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.693197] ? security_file_ioctl+0x83/0xb0 [ 2090.697593] SyS_ioctl+0x7f/0xb0 [ 2090.700949] ? do_vfs_ioctl+0xff0/0xff0 [ 2090.704910] do_syscall_64+0x1d5/0x640 [ 2090.708780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2090.713952] RIP: 0033:0x466459 [ 2090.717139] RSP: 002b:00007f69f055c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2090.724836] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2090.732170] RDX: 0000000020000140 RSI: 00000000c0405610 RDI: 0000000000000003 [ 2090.739425] RBP: 00007f69f055c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.746681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:07:39 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:39 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:39 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:39 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) read$dsp(0xffffffffffffffff, &(0x7f0000000180)=""/199, 0xc7) 13:07:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 13:07:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2b3, 0x101040) [ 2090.753939] R13: 00007ffef019ef2f R14: 00007f69f055c300 R15: 0000000000022000 13:07:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:39 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 13:07:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 13:07:39 executing program 1: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x7) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x20c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x6}, 0x200, 0x101, 0x0, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x81, 0x1, 0x6, 0x4d, 0x0, 0x4, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe039, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x3618, 0x2, 0x6, 0x9, 0x376, 0x4, 0x800}, r1, 0x20000004, r2, 0x0) 13:07:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 2091.040033] FAULT_INJECTION: forcing a failure. [ 2091.040033] name failslab, interval 1, probability 0, space 0, times 0 [ 2091.061267] CPU: 0 PID: 24365 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2091.069177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2091.078555] Call Trace: [ 2091.081148] dump_stack+0x1b2/0x281 [ 2091.084782] should_fail.cold+0x10a/0x149 [ 2091.088925] should_failslab+0xd6/0x130 [ 2091.092887] kmem_cache_alloc+0x28e/0x3c0 [ 2091.097026] get_empty_filp+0x86/0x3e0 [ 2091.100910] alloc_file+0x23/0x440 [ 2091.104442] anon_inode_getfile+0x163/0x2f0 [ 2091.108752] ? compat_SyS_epoll_pwait+0x240/0x240 [ 2091.113588] ? __lockdep_init_map+0x100/0x560 [ 2091.118079] dma_buf_export+0x4c8/0xa20 [ 2091.122035] vb2_vmalloc_get_dmabuf+0xe6/0x160 [ 2091.126595] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2091.131592] ? mark_held_locks+0xa6/0xf0 [ 2091.135816] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2091.140815] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2091.145290] vb2_core_expbuf+0x287/0x4b0 [ 2091.149329] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2091.154239] __video_do_ioctl+0x456/0x6a0 [ 2091.158367] ? video_ioctl2+0x30/0x30 [ 2091.162145] ? __might_fault+0x177/0x1b0 [ 2091.166187] ? video_ioctl2+0x30/0x30 [ 2091.169967] video_usercopy+0xfd/0xe70 [ 2091.173850] ? v4l_g_ctrl+0x390/0x390 [ 2091.177647] ? trace_hardirqs_on+0x10/0x10 [ 2091.181862] ? fsnotify+0x974/0x11b0 [ 2091.185553] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2091.190460] ? __handle_mm_fault+0x80f/0x4620 [ 2091.195021] v4l2_ioctl+0x1bb/0x2f0 [ 2091.198624] ? v4l2_open+0x2f0/0x2f0 [ 2091.202367] do_vfs_ioctl+0x75a/0xff0 [ 2091.206158] ? ioctl_preallocate+0x1a0/0x1a0 [ 2091.210544] ? lock_downgrade+0x740/0x740 [ 2091.214676] ? __fget+0x225/0x360 [ 2091.218138] ? do_vfs_ioctl+0xff0/0xff0 [ 2091.222091] ? security_file_ioctl+0x83/0xb0 [ 2091.226480] SyS_ioctl+0x7f/0xb0 [ 2091.229871] ? do_vfs_ioctl+0xff0/0xff0 [ 2091.233830] do_syscall_64+0x1d5/0x640 13:07:40 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x14, 0x5, 0x4, 0x3, 0x0, 0x8, 0x2211a, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1dcd030dcd4f77e4, @perf_config_ext={0xff, 0x7f}, 0x13520, 0x3f, 0x8, 0x7, 0x1, 0xb8b, 0x5dc}, 0xffffffffffffffff, 0x1, r0, 0x9) 13:07:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 2091.237706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2091.242875] RIP: 0033:0x466459 [ 2091.246039] RSP: 002b:00007f69f055c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2091.253724] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2091.260973] RDX: 0000000020000140 RSI: 00000000c0405610 RDI: 0000000000000003 [ 2091.268225] RBP: 00007f69f055c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.275473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2091.282721] R13: 00007ffef019ef2f R14: 00007f69f055c300 R15: 0000000000022000 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x5) 13:07:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0xe0) recvmsg$kcm(r0, &(0x7f0000004480)={&(0x7f0000000000)=@ax25={{0x3, @null}, [@rose, @netrom, @netrom, @rose, @remote, @rose, @remote, @netrom]}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/91, 0x5b}, {&(0x7f0000001300)=""/113, 0x71}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/19, 0x13}], 0x9, &(0x7f0000003480)=""/4096, 0x1000}, 0x12141) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 13:07:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2091.582529] FAULT_INJECTION: forcing a failure. [ 2091.582529] name failslab, interval 1, probability 0, space 0, times 0 [ 2091.594317] CPU: 1 PID: 24403 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2091.602234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2091.611578] Call Trace: [ 2091.614158] dump_stack+0x1b2/0x281 [ 2091.617862] should_fail.cold+0x10a/0x149 [ 2091.621997] should_failslab+0xd6/0x130 [ 2091.625952] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2091.630601] apparmor_file_alloc_security+0x129/0x800 [ 2091.635773] security_file_alloc+0x66/0xa0 [ 2091.639996] ? selinux_is_enabled+0x5/0x50 [ 2091.644221] get_empty_filp+0x15c/0x3e0 [ 2091.648180] alloc_file+0x23/0x440 [ 2091.651731] anon_inode_getfile+0x163/0x2f0 [ 2091.656027] ? compat_SyS_epoll_pwait+0x240/0x240 [ 2091.660847] ? __lockdep_init_map+0x100/0x560 [ 2091.665333] dma_buf_export+0x4c8/0xa20 [ 2091.669298] vb2_vmalloc_get_dmabuf+0xe6/0x160 [ 2091.673865] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2091.678788] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2091.687266] vb2_core_expbuf+0x287/0x4b0 [ 2091.691329] ? vb2_vmalloc_get_userptr+0x470/0x470 [ 2091.696250] __video_do_ioctl+0x456/0x6a0 [ 2091.700379] ? video_ioctl2+0x30/0x30 [ 2091.704166] ? __might_fault+0x177/0x1b0 [ 2091.708215] ? video_ioctl2+0x30/0x30 [ 2091.712012] video_usercopy+0xfd/0xe70 [ 2091.715876] ? v4l_g_ctrl+0x390/0x390 [ 2091.719658] ? trace_hardirqs_on+0x10/0x10 [ 2091.723871] ? fsnotify+0x974/0x11b0 [ 2091.727568] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2091.732492] ? __handle_mm_fault+0x80f/0x4620 [ 2091.736962] v4l2_ioctl+0x1bb/0x2f0 [ 2091.740564] ? v4l2_open+0x2f0/0x2f0 [ 2091.744263] do_vfs_ioctl+0x75a/0xff0 [ 2091.748055] ? ioctl_preallocate+0x1a0/0x1a0 [ 2091.752449] ? lock_downgrade+0x740/0x740 [ 2091.756587] ? __fget+0x225/0x360 [ 2091.760019] ? do_vfs_ioctl+0xff0/0xff0 [ 2091.763975] ? security_file_ioctl+0x83/0xb0 [ 2091.768368] SyS_ioctl+0x7f/0xb0 [ 2091.771720] ? do_vfs_ioctl+0xff0/0xff0 [ 2091.775674] do_syscall_64+0x1d5/0x640 [ 2091.779551] entry_SYSCALL_64_after_hwframe+0x46/0xbb 13:07:40 executing program 2 (fault-call:2 fault-nth:4): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:40 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140a, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) 13:07:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7, 0x81, 0xff, 0x3f, 0x0, 0x10000, 0x30001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x2, @perf_config_ext={0x4f7, 0xffc000000}, 0x19080, 0xae33, 0x5, 0x1, 0x100, 0x3, 0x1f}, 0x0, 0x1, r0, 0x9) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x68e23191fda56d70) [ 2091.784720] RIP: 0033:0x466459 [ 2091.787892] RSP: 002b:00007f69f055c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2091.795586] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 2091.802848] RDX: 0000000020000140 RSI: 00000000c0405610 RDI: 0000000000000003 [ 2091.810096] RBP: 00007f69f055c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.817353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2091.824609] R13: 00007ffef019ef2f R14: 00007f69f055c300 R15: 0000000000022000 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 13:07:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:40 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:40 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100027bd7000fcdbdf25110012160c00060000000000000000000c000600020000000200000005001200810000000c0006002d3265a5e5ec69940d62182af4f0be322271f2bbf1633ef96aeb60a420603c183459"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffffd}, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 13:07:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x45, 0x0, 0x0, 0xffffffffffffffff, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:40 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:40 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x80, 0x8, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8000, 0x2, 0xfffffffc}}) 13:07:40 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x140b, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x6000080) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x140e, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40845}, 0x404c804) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x2, 0xffffffffffffffff, 0x5) 13:07:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:41 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:41 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x5, 0x61, 0x2710f4083eab429f}) 13:07:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x5) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 13:07:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x3b, 0x205, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x80000000}, @enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0xff83}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @loopback}]}, 0x1038) 13:07:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x2, 0x3d18, 0x4, {0x2, @sliced={0x9, [0x1, 0x200, 0x0, 0x3, 0x5, 0x20, 0xdb9, 0x7, 0x0, 0x200, 0x30, 0x40, 0x3f, 0x2, 0x4ace, 0x81, 0x87, 0x2, 0x1, 0x4a2, 0x7, 0xffff, 0x6ef7, 0x4, 0x100, 0x3ff, 0x7, 0x1f, 0xfffd, 0x3f, 0x0, 0x4, 0x4, 0x2, 0x6, 0x1, 0x9, 0x56a5, 0x2, 0x7ff, 0x88, 0x40, 0x2, 0x5, 0x20, 0x9, 0x2, 0x1ff], 0x6}}, 0xfffff7bf}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x20, 0x1, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x2}) 13:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, 0x0, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:41 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 13:07:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x5) 13:07:41 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000000000008000100000000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40440d4}, 0x40) 13:07:41 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x810) perf_event_open(&(0x7f0000000100)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9}, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) 13:07:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x13, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x2b}}, 0x0) 13:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 13:07:41 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4380, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x5) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xf8, 0x1, 0x8, 0x2, 0x0, 0x6, 0x1001, 0x11, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x5500, 0x80000000, 0x400, 0x3, 0x1, 0x8, 0xff10}, 0x0, 0x8, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 13:07:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x5) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x80, 0x2da0) 13:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2092.599544] ------------[ cut here ]------------ [ 2092.604528] WARNING: CPU: 1 PID: 24492 at drivers/dma-buf/dma-buf.c:1039 dma_buf_vunmap+0x181/0x1f0 [ 2092.613738] Kernel panic - not syncing: panic_on_warn set ... [ 2092.613738] [ 2092.621095] CPU: 1 PID: 24492 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2092.628965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2092.638485] Call Trace: [ 2092.641069] dump_stack+0x1b2/0x281 [ 2092.644692] panic+0x1f9/0x42d [ 2092.647882] ? add_taint.cold+0x16/0x16 [ 2092.651857] ? dma_buf_vunmap+0x181/0x1f0 [ 2092.656016] ? dma_buf_vunmap+0x181/0x1f0 [ 2092.660157] __warn.cold+0x20/0x44 [ 2092.663697] ? ist_end_non_atomic+0x10/0x10 [ 2092.668020] ? dma_buf_vunmap+0x181/0x1f0 [ 2092.672177] report_bug+0x208/0x250 [ 2092.675845] do_error_trap+0x195/0x2d0 [ 2092.679921] ? math_error+0x2d0/0x2d0 [ 2092.683724] ? vim2m_release+0xa0/0x120 [ 2092.687791] ? v4l2_release+0xf4/0x190 [ 2092.691674] ? __fput+0x25f/0x7a0 [ 2092.695121] ? task_work_run+0x11f/0x190 [ 2092.699178] ? exit_to_usermode_loop+0x1ad/0x200 [ 2092.703930] ? do_syscall_64+0x4a3/0x640 [ 2092.707994] ? trace_hardirqs_on+0x10/0x10 [ 2092.712238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2092.717082] invalid_op+0x1b/0x40 [ 2092.720535] RIP: 0010:dma_buf_vunmap+0x181/0x1f0 [ 2092.725296] RSP: 0018:ffff8880880e7c80 EFLAGS: 00010297 [ 2092.730657] RAX: ffff88806d0644c0 RBX: 0000000000000000 RCX: 0000000000000000 [ 2092.738094] RDX: 0000000000000000 RSI: ffffc9000b6c3000 RDI: 0000000000000000 [ 2092.745361] RBP: ffffc9000b6c3000 R08: 0000000000000000 R09: 0000000000040550 [ 2092.752628] R10: ffff88806d064d70 R11: ffff88806d0644c0 R12: ffffc9000b6c3000 [ 2092.759893] R13: ffff8880752c5aa8 R14: ffff888096edfb00 R15: 0000000000000000 [ 2092.767183] vb2_vmalloc_detach_dmabuf+0x57/0x80 [ 2092.771932] ? vb2_vmalloc_map_dmabuf+0x90/0x90 [ 2092.776587] __vb2_plane_dmabuf_put+0x10b/0x2e0 [ 2092.781374] __vb2_queue_free+0x5e4/0x7a0 [ 2092.785527] ? vidioc_querycap+0xd0/0xd0 [ 2092.789610] ? dev_debug_store+0xe0/0xe0 [ 2092.793695] vb2_core_queue_release+0x5b/0x70 [ 2092.798176] v4l2_m2m_ctx_release+0x26/0x30 [ 2092.802484] vim2m_release+0xd4/0x120 [ 2092.806265] v4l2_release+0xf4/0x190 [ 2092.809991] __fput+0x25f/0x7a0 [ 2092.813259] task_work_run+0x11f/0x190 [ 2092.817334] exit_to_usermode_loop+0x1ad/0x200 [ 2092.821927] do_syscall_64+0x4a3/0x640 [ 2092.825792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2092.831053] RIP: 0033:0x41926b [ 2092.834224] RSP: 002b:00007ffef019ef90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2092.841922] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b [ 2092.849184] RDX: 0000000000571890 RSI: 00000000089075c3 RDI: 0000000000000003 [ 2092.856444] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b315211d8 [ 2092.863694] R10: 00007ffef019f080 R11: 0000000000000293 R12: 00000000001fee37 [ 2092.870954] R13: 00000000000003e8 R14: 000000000056bf60 R15: 00000000001fedfa [ 2092.878880] Kernel Offset: disabled [ 2092.882560] Rebooting in 86400 seconds..