VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCkAAP//AtvxeQ==") creat(&(0x7f0000000380)='./file0\x00', 0x24) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) sync() 23:51:38 executing program 4: sync() syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) sync() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090701006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000e0001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090801006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 725.183912] kauditd_printk_skb: 37 callbacks suppressed [ 725.183925] audit: type=1804 audit(1674604298.941:3197): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 23:51:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100100001006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 725.347961] audit: type=1804 audit(1674604298.941:3198): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.423280] audit: type=1804 audit(1674604298.941:3199): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.448750] audit: type=1804 audit(1674604298.941:3200): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.473625] audit: type=1804 audit(1674604298.941:3201): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.498955] audit: type=1804 audit(1674604298.941:3202): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.539050] audit: type=1804 audit(1674604298.941:3203): pid=16328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.588733] audit: type=1804 audit(1674604298.941:3204): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.668679] audit: type=1804 audit(1674604298.941:3205): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.709063] BTRFS info (device loop0): enabling inode map caching [ 725.728249] audit: type=1804 audit(1674604298.941:3206): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3203843958/syzkaller.OFJuWy/521/bus" dev="sda1" ino=14085 res=1 [ 725.728391] BTRFS warning (device loop0): excessive commit interval 622039222 [ 725.798646] BTRFS warning (device ): duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (16327) [ 725.818494] BTRFS warning (device ): duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (16350) [ 725.837940] BTRFS info (device loop0): force zlib compression, level 3 23:51:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300100000000c000000000000500001004c000100090001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090901006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100110001006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 725.854117] BTRFS info (device loop0): using free space tree [ 725.862240] BTRFS warning (device ): duplicate device /dev/loop3 devid 1 generation 8 scanned by systemd-udevd (16356) [ 725.872531] BTRFS info (device loop0): has skinny extents [ 725.879152] BTRFS warning (device ): duplicate device /dev/loop4 devid 1 generation 8 scanned by systemd-udevd (16361) [ 725.915842] nla_parse: 26 callbacks suppressed [ 725.915852] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 725.935050] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.962486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:39 executing program 0: sync() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000380)='./file0\x00', 0x24) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 23:51:40 executing program 4: sync() syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090a01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100120001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 1) [ 726.312732] BTRFS info (device loop0): enabling inode map caching [ 726.320514] BTRFS warning (device loop0): excessive commit interval 622039222 [ 726.327919] BTRFS info (device loop0): force zlib compression, level 3 [ 726.336988] BTRFS info (device loop0): using free space tree [ 726.343746] BTRFS info (device loop0): has skinny extents 23:51:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0xb05, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:40 executing program 0: sync() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000380)='./file0\x00', 0x24) [ 726.403205] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 23:51:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090b01006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 726.451358] FAULT_INJECTION: forcing a failure. [ 726.451358] name failslab, interval 1, probability 0, space 0, times 0 [ 726.468771] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 23:51:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100140001006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 726.499628] CPU: 0 PID: 16440 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 726.507764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 726.516637] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 726.517127] Call Trace: [ 726.528532] dump_stack+0x1fc/0x2ef [ 726.532219] should_fail.cold+0xa/0xf [ 726.536044] ? setup_fault_attr+0x200/0x200 [ 726.540380] ? lock_acquire+0x170/0x3c0 [ 726.544484] __should_failslab+0x115/0x180 [ 726.548845] should_failslab+0x5/0x10 [ 726.552670] kmem_cache_alloc_node+0x245/0x3b0 [ 726.557263] __alloc_skb+0x71/0x560 [ 726.560912] netlink_sendmsg+0x9f6/0xc50 [ 726.564987] ? aa_af_perm+0x230/0x230 [ 726.568783] ? nlmsg_notify+0x1f0/0x1f0 [ 726.572889] ? kernel_recvmsg+0x220/0x220 [ 726.577061] ? nlmsg_notify+0x1f0/0x1f0 [ 726.581042] sock_sendmsg+0xc3/0x120 [ 726.584756] ___sys_sendmsg+0x7bb/0x8e0 [ 726.588739] ? check_preemption_disabled+0x41/0x280 [ 726.593757] ? copy_msghdr_from_user+0x440/0x440 [ 726.598512] ? __fget+0x32f/0x510 [ 726.601985] ? lock_downgrade+0x720/0x720 [ 726.606124] ? check_preemption_disabled+0x41/0x280 [ 726.611140] ? check_preemption_disabled+0x41/0x280 [ 726.616180] ? __fget+0x356/0x510 [ 726.619622] ? do_dup2+0x450/0x450 [ 726.623157] ? lock_downgrade+0x720/0x720 [ 726.627296] ? vfs_write+0x3d7/0x540 [ 726.631029] ? __fdget+0x1d0/0x230 [ 726.634594] __x64_sys_sendmsg+0x132/0x220 [ 726.638836] ? __sys_sendmsg+0x1b0/0x1b0 [ 726.642894] ? vfs_write+0x393/0x540 [ 726.646608] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 726.651982] ? trace_hardirqs_off_caller+0x6e/0x210 [ 726.656995] ? do_syscall_64+0x21/0x620 [ 726.660977] do_syscall_64+0xf9/0x620 [ 726.664789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 726.669971] RIP: 0033:0x7fa22b5160c9 [ 726.673680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.692581] RSP: 002b:00007fa229a88168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:51:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0xb05, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090c01006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 726.700289] RAX: ffffffffffffffda RBX: 00007fa22b635f80 RCX: 00007fa22b5160c9 [ 726.707561] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 726.714831] RBP: 00007fa229a881d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.722103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.729361] R13: 00007ffd36291adf R14: 00007fa229a88300 R15: 0000000000022000 23:51:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 2) [ 726.792299] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 726.813509] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.872315] FAULT_INJECTION: forcing a failure. [ 726.872315] name failslab, interval 1, probability 0, space 0, times 0 [ 726.906466] CPU: 1 PID: 16460 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 726.914394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 726.923868] Call Trace: [ 726.926485] dump_stack+0x1fc/0x2ef [ 726.930140] should_fail.cold+0xa/0xf [ 726.933969] ? setup_fault_attr+0x200/0x200 [ 726.938320] ? lock_acquire+0x170/0x3c0 [ 726.942321] __should_failslab+0x115/0x180 [ 726.946580] should_failslab+0x5/0x10 [ 726.950403] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 726.955532] __kmalloc_node_track_caller+0x38/0x70 [ 726.960486] __alloc_skb+0xae/0x560 [ 726.964140] netlink_sendmsg+0x9f6/0xc50 [ 726.968334] ? aa_af_perm+0x230/0x230 [ 726.972219] ? nlmsg_notify+0x1f0/0x1f0 [ 726.976205] ? kernel_recvmsg+0x220/0x220 [ 726.980373] ? nlmsg_notify+0x1f0/0x1f0 [ 726.984364] sock_sendmsg+0xc3/0x120 [ 726.988095] ___sys_sendmsg+0x7bb/0x8e0 [ 726.992090] ? check_preemption_disabled+0x41/0x280 [ 726.997116] ? copy_msghdr_from_user+0x440/0x440 [ 727.001889] ? __fget+0x32f/0x510 [ 727.005368] ? lock_downgrade+0x720/0x720 [ 727.009536] ? check_preemption_disabled+0x41/0x280 [ 727.014566] ? check_preemption_disabled+0x41/0x280 [ 727.019593] ? __fget+0x356/0x510 [ 727.023048] ? do_dup2+0x450/0x450 [ 727.026584] ? lock_downgrade+0x720/0x720 [ 727.030727] ? vfs_write+0x3d7/0x540 [ 727.034466] ? __fdget+0x1d0/0x230 [ 727.038010] __x64_sys_sendmsg+0x132/0x220 [ 727.042397] ? __sys_sendmsg+0x1b0/0x1b0 [ 727.046472] ? vfs_write+0x393/0x540 [ 727.050200] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 727.055564] ? trace_hardirqs_off_caller+0x6e/0x210 [ 727.060604] ? do_syscall_64+0x21/0x620 [ 727.064600] do_syscall_64+0xf9/0x620 [ 727.068407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 727.073596] RIP: 0033:0x7fa22b5160c9 [ 727.077308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.096199] RSP: 002b:00007fa229a88168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.103911] RAX: ffffffffffffffda RBX: 00007fa22b635f80 RCX: 00007fa22b5160c9 [ 727.111172] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 727.118429] RBP: 00007fa229a881d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.125689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.132959] R13: 00007ffd36291adf R14: 00007fa229a88300 R15: 0000000000022000 [ 727.282728] BTRFS info (device loop4): enabling inode map caching [ 727.309287] BTRFS warning (device loop4): excessive commit interval 622039222 [ 727.324061] BTRFS info (device loop4): force zlib compression, level 3 [ 727.337917] BTRFS info (device loop4): using free space tree [ 727.339902] BTRFS warning (device ): duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (16465) [ 727.367028] BTRFS info (device loop4): has skinny extents [ 727.382565] BTRFS warning (device ): duplicate device /dev/loop0 devid 1 generation 8 scanned by systemd-udevd (16475) 23:51:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100310001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:41 executing program 4: sync() syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0xb05, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 3) 23:51:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090e01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:41 executing program 0: sync() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="757365725f737562766f6c5f726d5f616c6c6f7765642c6e6f696e6f64655f63616368652c696e6f64655f63616368652c636f6d6d69743d3078303030303030303032353133393062362c636f6d70726573732d666f7263652c6e6f61636c2c747265656c6f672c00a05a4926bbcd3204c710a23cf01a1fc178d0b3478aea8720314f940f80786138b6e30addbddbdc6dd5826709125621f95ba5f64f7085b9642cca4487c650c6fead084fd50644388b7323f5b44d13efc811aed7ad"], 0x1, 0x50ef, &(0x7f000000a2c0)="$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") 23:51:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090f01006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 727.862784] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 727.899969] FAULT_INJECTION: forcing a failure. [ 727.899969] name failslab, interval 1, probability 0, space 0, times 0 23:51:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) [ 727.915246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.938272] CPU: 1 PID: 16508 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 727.946193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 727.955560] Call Trace: [ 727.958167] dump_stack+0x1fc/0x2ef [ 727.961815] should_fail.cold+0xa/0xf [ 727.965632] ? setup_fault_attr+0x200/0x200 [ 727.969968] ? perf_trace_lock_acquire+0x530/0x530 [ 727.974912] ? lock_downgrade+0x720/0x720 [ 727.979082] ? check_preemption_disabled+0x41/0x280 [ 727.984121] __should_failslab+0x115/0x180 [ 727.988373] should_failslab+0x5/0x10 [ 727.992187] kmem_cache_alloc+0x3f/0x370 [ 727.996272] skb_clone+0x151/0x3d0 [ 727.999842] netlink_deliver_tap+0x955/0xb00 [ 728.004274] netlink_unicast+0x545/0x690 [ 728.008355] ? netlink_sendskb+0x110/0x110 [ 728.012604] ? _copy_from_iter_full+0x229/0x7c0 [ 728.017290] ? __phys_addr_symbol+0x2c/0x70 [ 728.021730] ? __check_object_size+0x17b/0x3e0 [ 728.026334] netlink_sendmsg+0x6c3/0xc50 [ 728.030413] ? aa_af_perm+0x230/0x230 [ 728.034230] ? nlmsg_notify+0x1f0/0x1f0 [ 728.038373] ? kernel_recvmsg+0x220/0x220 [ 728.042560] ? nlmsg_notify+0x1f0/0x1f0 [ 728.046663] sock_sendmsg+0xc3/0x120 [ 728.050401] ___sys_sendmsg+0x7bb/0x8e0 [ 728.054396] ? check_preemption_disabled+0x41/0x280 [ 728.059424] ? copy_msghdr_from_user+0x440/0x440 [ 728.064202] ? __fget+0x32f/0x510 [ 728.067685] ? lock_downgrade+0x720/0x720 [ 728.071846] ? check_preemption_disabled+0x41/0x280 [ 728.076885] ? check_preemption_disabled+0x41/0x280 [ 728.081948] ? __fget+0x356/0x510 [ 728.085516] ? do_dup2+0x450/0x450 [ 728.089066] ? lock_downgrade+0x720/0x720 [ 728.093281] ? vfs_write+0x3d7/0x540 [ 728.097011] ? __fdget+0x1d0/0x230 [ 728.100598] __x64_sys_sendmsg+0x132/0x220 [ 728.104841] ? __sys_sendmsg+0x1b0/0x1b0 [ 728.108909] ? vfs_write+0x393/0x540 [ 728.112654] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 728.118036] ? trace_hardirqs_off_caller+0x6e/0x210 [ 728.123065] ? do_syscall_64+0x21/0x620 [ 728.127057] do_syscall_64+0xf9/0x620 [ 728.130872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 728.136071] RIP: 0033:0x7fa22b5160c9 [ 728.139795] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.158706] RSP: 002b:00007fa229a88168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:51:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100091001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100480001006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 728.166433] RAX: ffffffffffffffda RBX: 00007fa22b635f80 RCX: 00007fa22b5160c9 [ 728.173707] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 728.180968] RBP: 00007fa229a881d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.188227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.195516] R13: 00007ffd36291adf R14: 00007fa229a88300 R15: 0000000000022000 [ 728.265589] BTRFS info (device loop0): enabling inode map caching [ 728.318962] BTRFS warning (device loop0): excessive commit interval 622039222 [ 728.329036] BTRFS info (device loop0): force zlib compression, level 3 [ 728.351696] BTRFS info (device loop0): using free space tree [ 728.367156] BTRFS info (device loop0): has skinny extents 23:51:42 executing program 4: sync() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 4) 23:51:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100094801006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100600001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:42 executing program 0: sync() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 728.999073] FAULT_INJECTION: forcing a failure. [ 728.999073] name failslab, interval 1, probability 0, space 0, times 0 [ 729.012674] CPU: 1 PID: 16577 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 729.020587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 729.030079] Call Trace: [ 729.032688] dump_stack+0x1fc/0x2ef [ 729.036345] should_fail.cold+0xa/0xf [ 729.040179] ? setup_fault_attr+0x200/0x200 [ 729.044523] ? lock_acquire+0x170/0x3c0 23:51:42 executing program 0: sync() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 729.048530] __should_failslab+0x115/0x180 [ 729.052792] should_failslab+0x5/0x10 [ 729.056614] kmem_cache_alloc_node+0x245/0x3b0 [ 729.061215] __alloc_skb+0x71/0x560 [ 729.064866] tca_action_gd+0x546/0x1550 [ 729.068899] ? tca_get_fill.constprop.0+0x4d0/0x4d0 [ 729.073937] ? lock_downgrade+0x720/0x720 [ 729.078104] ? lock_acquire+0x170/0x3c0 [ 729.082104] ? __bpf_address_lookup+0x330/0x330 [ 729.086798] ? check_preemption_disabled+0x41/0x280 [ 729.091846] ? is_bpf_text_address+0xfc/0x1b0 23:51:42 executing program 0: sync() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 729.096370] ? kernel_text_address+0xbd/0xf0 [ 729.100794] ? __kernel_text_address+0x9/0x30 [ 729.105304] ? unwind_get_return_address+0x51/0x90 [ 729.110250] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 729.115634] ? __save_stack_trace+0xaf/0x190 [ 729.120188] ? do_syscall_64+0xf9/0x620 [ 729.124183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 729.129579] ? lock_downgrade+0x720/0x720 [ 729.133737] ? lock_acquire+0x170/0x3c0 [ 729.137758] ? memset+0x20/0x40 [ 729.141053] ? nla_parse+0x1b2/0x290 [ 729.144789] tc_ctl_action+0x26d/0x410 [ 729.148698] ? tcf_action_add+0x360/0x360 [ 729.152888] ? tcf_action_add+0x360/0x360 [ 729.157055] rtnetlink_rcv_msg+0x453/0xb80 [ 729.161308] ? rtnl_calcit.isra.0+0x430/0x430 [ 729.165822] ? perf_trace_lock_acquire+0x530/0x530 [ 729.170767] ? perf_trace_lock+0xe2/0x4b0 [ 729.174926] ? netdev_pick_tx+0x2f0/0x2f0 [ 729.179067] ? __copy_skb_header+0x414/0x500 [ 729.183471] ? perf_trace_lock_acquire+0x530/0x530 [ 729.188401] netlink_rcv_skb+0x160/0x440 [ 729.192460] ? rtnl_calcit.isra.0+0x430/0x430 [ 729.197052] ? netlink_ack+0xae0/0xae0 [ 729.200959] netlink_unicast+0x4d5/0x690 [ 729.205025] ? netlink_sendskb+0x110/0x110 [ 729.209251] ? _copy_from_iter_full+0x229/0x7c0 [ 729.213912] ? __phys_addr_symbol+0x2c/0x70 [ 729.218224] ? __check_object_size+0x17b/0x3e0 [ 729.222797] netlink_sendmsg+0x6c3/0xc50 [ 729.226854] ? aa_af_perm+0x230/0x230 [ 729.230648] ? nlmsg_notify+0x1f0/0x1f0 [ 729.234612] ? kernel_recvmsg+0x220/0x220 [ 729.238770] ? nlmsg_notify+0x1f0/0x1f0 [ 729.242747] sock_sendmsg+0xc3/0x120 [ 729.246460] ___sys_sendmsg+0x7bb/0x8e0 [ 729.250435] ? check_preemption_disabled+0x41/0x280 [ 729.255450] ? copy_msghdr_from_user+0x440/0x440 [ 729.260206] ? __fget+0x32f/0x510 [ 729.263711] ? lock_downgrade+0x720/0x720 [ 729.267869] ? check_preemption_disabled+0x41/0x280 [ 729.272890] ? check_preemption_disabled+0x41/0x280 [ 729.277916] ? __fget+0x356/0x510 [ 729.281367] ? do_dup2+0x450/0x450 [ 729.284895] ? lock_downgrade+0x720/0x720 [ 729.289037] ? vfs_write+0x3d7/0x540 [ 729.292745] ? __fdget+0x1d0/0x230 [ 729.296278] __x64_sys_sendmsg+0x132/0x220 [ 729.300501] ? __sys_sendmsg+0x1b0/0x1b0 [ 729.304564] ? vfs_write+0x393/0x540 [ 729.308300] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 729.313658] ? trace_hardirqs_off_caller+0x6e/0x210 [ 729.318666] ? do_syscall_64+0x21/0x620 [ 729.322632] do_syscall_64+0xf9/0x620 [ 729.326428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 729.331610] RIP: 0033:0x7fa22b5160c9 [ 729.335311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.354207] RSP: 002b:00007fa229a88168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.361920] RAX: ffffffffffffffda RBX: 00007fa22b635f80 RCX: 00007fa22b5160c9 [ 729.369179] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 729.376440] RBP: 00007fa229a881d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.383701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.390967] R13: 00007ffd36291adf R14: 00007fa229a88300 R15: 0000000000022000 23:51:43 executing program 0: sync() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:51:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090300006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100094c01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:43 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 5) 23:51:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090400006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:51:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 23:51:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099900006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 729.819118] FAULT_INJECTION: forcing a failure. [ 729.819118] name failslab, interval 1, probability 0, space 0, times 0 [ 729.858043] CPU: 0 PID: 16614 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 23:51:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 729.865953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 729.875320] Call Trace: [ 729.877935] dump_stack+0x1fc/0x2ef [ 729.881604] should_fail.cold+0xa/0xf [ 729.885427] ? setup_fault_attr+0x200/0x200 [ 729.889767] ? lock_acquire+0x170/0x3c0 [ 729.893767] __should_failslab+0x115/0x180 [ 729.898020] should_failslab+0x5/0x10 [ 729.901838] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 729.906964] __kmalloc_node_track_caller+0x38/0x70 [ 729.911906] __alloc_skb+0xae/0x560 [ 729.915561] tca_action_gd+0x546/0x1550 23:51:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 729.919563] ? tca_get_fill.constprop.0+0x4d0/0x4d0 [ 729.924593] ? lock_downgrade+0x720/0x720 [ 729.928755] ? lock_acquire+0x170/0x3c0 [ 729.932743] ? __bpf_address_lookup+0x330/0x330 [ 729.937429] ? check_preemption_disabled+0x41/0x280 [ 729.942468] ? is_bpf_text_address+0xfc/0x1b0 [ 729.946987] ? kernel_text_address+0xbd/0xf0 [ 729.951416] ? __kernel_text_address+0x9/0x30 [ 729.955961] ? unwind_get_return_address+0x51/0x90 [ 729.960904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:51:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 729.966285] ? __save_stack_trace+0xaf/0x190 [ 729.970736] ? do_syscall_64+0xf9/0x620 [ 729.974726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 729.980105] ? lock_downgrade+0x720/0x720 [ 729.984514] ? lock_acquire+0x170/0x3c0 [ 729.988537] ? memset+0x20/0x40 [ 729.991835] ? nla_parse+0x1b2/0x290 [ 729.995568] tc_ctl_action+0x26d/0x410 [ 729.999470] ? tcf_action_add+0x360/0x360 [ 730.003646] ? tcf_action_add+0x360/0x360 [ 730.007811] rtnetlink_rcv_msg+0x453/0xb80 [ 730.012068] ? rtnl_calcit.isra.0+0x430/0x430 23:51:43 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 730.016583] ? perf_trace_lock_acquire+0x530/0x530 [ 730.021526] ? perf_trace_lock+0xe2/0x4b0 [ 730.025687] ? netdev_pick_tx+0x2f0/0x2f0 [ 730.029845] ? __copy_skb_header+0x414/0x500 [ 730.034267] ? perf_trace_lock_acquire+0x530/0x530 [ 730.039218] netlink_rcv_skb+0x160/0x440 [ 730.043299] ? rtnl_calcit.isra.0+0x430/0x430 [ 730.047812] ? netlink_ack+0xae0/0xae0 [ 730.051735] netlink_unicast+0x4d5/0x690 [ 730.055814] ? netlink_sendskb+0x110/0x110 [ 730.060063] ? _copy_from_iter_full+0x229/0x7c0 [ 730.064745] ? __phys_addr_symbol+0x2c/0x70 23:51:43 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 730.069085] ? __check_object_size+0x17b/0x3e0 [ 730.073686] netlink_sendmsg+0x6c3/0xc50 [ 730.077769] ? aa_af_perm+0x230/0x230 [ 730.081582] ? nlmsg_notify+0x1f0/0x1f0 [ 730.085567] ? kernel_recvmsg+0x220/0x220 [ 730.089735] ? nlmsg_notify+0x1f0/0x1f0 [ 730.093723] sock_sendmsg+0xc3/0x120 [ 730.097457] ___sys_sendmsg+0x7bb/0x8e0 [ 730.101451] ? check_preemption_disabled+0x41/0x280 [ 730.106476] ? copy_msghdr_from_user+0x440/0x440 [ 730.111247] ? __fget+0x32f/0x510 [ 730.114718] ? lock_downgrade+0x720/0x720 [ 730.118884] ? check_preemption_disabled+0x41/0x280 [ 730.123925] ? check_preemption_disabled+0x41/0x280 [ 730.128971] ? __fget+0x356/0x510 [ 730.132448] ? do_dup2+0x450/0x450 [ 730.136007] ? lock_downgrade+0x720/0x720 [ 730.140172] ? vfs_write+0x3d7/0x540 [ 730.143908] ? __fdget+0x1d0/0x230 [ 730.147478] __x64_sys_sendmsg+0x132/0x220 [ 730.151727] ? __sys_sendmsg+0x1b0/0x1b0 [ 730.155812] ? vfs_write+0x393/0x540 [ 730.159552] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 730.164938] ? trace_hardirqs_off_caller+0x6e/0x210 [ 730.169976] ? do_syscall_64+0x21/0x620 [ 730.173973] do_syscall_64+0xf9/0x620 [ 730.177794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.182995] RIP: 0033:0x7fa22b5160c9 [ 730.186719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 730.205623] RSP: 002b:00007fa229a88168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.213326] RAX: ffffffffffffffda RBX: 00007fa22b635f80 RCX: 00007fa22b5160c9 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) (fail_nth: 6) 23:51:44 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 730.220595] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 730.227871] RBP: 00007fa229a881d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.235142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.242410] R13: 00007ffd36291adf R14: 00007fa229a88300 R15: 0000000000022000 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099a00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096801006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099b00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096c01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100097401006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099c00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100097a01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099d00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x990001}) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090003006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099e00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x990001}) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090007006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100099f00006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x990001}) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000a006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009a000006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3}) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090014006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009a100006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 730.924774] nla_parse: 31 callbacks suppressed [ 730.924784] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3}) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090020006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 730.967426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 731.001548] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3}) 23:51:44 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000000005) 23:51:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009a200006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 731.048853] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.086015] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (fail_nth: 1) 23:51:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090025006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:44 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000000005) [ 731.163866] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.180058] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 23:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 731.204288] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 731.215793] FAULT_INJECTION: forcing a failure. [ 731.215793] name failslab, interval 1, probability 0, space 0, times 0 [ 731.251877] CPU: 1 PID: 16779 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 731.259919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 731.269284] Call Trace: [ 731.271890] dump_stack+0x1fc/0x2ef [ 731.275540] should_fail.cold+0xa/0xf [ 731.279369] ? setup_fault_attr+0x200/0x200 [ 731.283708] ? lock_acquire+0x170/0x3c0 [ 731.287704] __should_failslab+0x115/0x180 [ 731.292107] should_failslab+0x5/0x10 [ 731.296101] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 731.301226] __kmalloc_node+0x38/0x70 [ 731.305048] kvmalloc_node+0x61/0xf0 [ 731.308786] v4l2_event_subscribe+0x8d/0x720 [ 731.313210] ? __might_fault+0x11f/0x1d0 [ 731.317297] v4l2_ctrl_subscribe_event+0x62/0x90 [ 731.322095] vicodec_subscribe_event+0x59/0xa0 [ 731.326702] __video_do_ioctl+0x49a/0xcd0 [ 731.330876] ? v4l_querycap+0x340/0x340 [ 731.334877] ? __might_fault+0x192/0x1d0 [ 731.338963] ? v4l_querycap+0x340/0x340 [ 731.342961] video_usercopy+0x13f/0xfa0 [ 731.346959] ? v4l_enumstd+0x60/0x60 [ 731.350692] ? perf_trace_lock+0xe2/0x4b0 [ 731.354860] ? perf_trace_lock_acquire+0x530/0x530 [ 731.359804] ? perf_trace_lock+0xe2/0x4b0 [ 731.363982] ? video_usercopy+0xfa0/0xfa0 [ 731.368250] v4l2_ioctl+0x147/0x1a0 [ 731.372046] ? video_devdata+0xa0/0xa0 [ 731.375957] do_vfs_ioctl+0xcdb/0x12e0 [ 731.379901] ? lock_downgrade+0x720/0x720 [ 731.384075] ? check_preemption_disabled+0x41/0x280 [ 731.389176] ? ioctl_preallocate+0x200/0x200 [ 731.393610] ? __fget+0x356/0x510 [ 731.397158] ? do_dup2+0x450/0x450 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000000005) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) [ 731.400713] ? vfs_write+0x393/0x540 [ 731.404497] ? fput+0x2b/0x190 [ 731.407823] ksys_ioctl+0x9b/0xc0 [ 731.411321] __x64_sys_ioctl+0x6f/0xb0 [ 731.415227] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 731.419961] do_syscall_64+0xf9/0x620 [ 731.423787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 731.428988] RIP: 0033:0x7fecb752f0c9 [ 731.432717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009a300006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 731.451736] RSP: 002b:00007fecb5aa1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.459583] RAX: ffffffffffffffda RBX: 00007fecb764ef80 RCX: 00007fecb752f0c9 [ 731.467201] RDX: 0000000020000040 RSI: 000000004020565a RDI: 0000000000000003 [ 731.474490] RBP: 00007fecb5aa11d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.481777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.489063] R13: 00007ffdd097919f R14: 00007fecb5aa1300 R15: 0000000000022000 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (fail_nth: 2) 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009003f006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090201006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 731.557736] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090301006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 731.640159] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090060006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090401006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090002006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x2, &(0x7f0000000040)={0x3, 0x990001}) 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xeac, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x5421, &(0x7f0000000040)={0x3, 0x990001}) 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090003006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 1) 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090501006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090004006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x5450, &(0x7f0000000040)={0x3, 0x990001}) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xec0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090007006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x5451, &(0x7f0000000040)={0x3, 0x990001}) 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090601006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 731.934500] FAULT_INJECTION: forcing a failure. [ 731.934500] name failslab, interval 1, probability 0, space 0, times 0 [ 731.993981] CPU: 1 PID: 16857 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 732.001916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 732.011400] Call Trace: [ 732.014014] dump_stack+0x1fc/0x2ef [ 732.017665] should_fail.cold+0xa/0xf [ 732.021494] ? setup_fault_attr+0x200/0x200 [ 732.025834] ? lock_acquire+0x170/0x3c0 [ 732.029955] __should_failslab+0x115/0x180 [ 732.034212] should_failslab+0x5/0x10 [ 732.038034] kmem_cache_alloc_trace+0x284/0x380 [ 732.042830] alloc_pipe_info+0xb8/0x470 [ 732.046849] splice_direct_to_actor+0x6dd/0x8d0 [ 732.051642] ? apparmor_getprocattr+0x11e0/0x11e0 [ 732.056514] ? generic_pipe_buf_nosteal+0x10/0x10 [ 732.061389] ? do_splice_to+0x160/0x160 [ 732.065381] ? security_file_permission+0x1c0/0x220 [ 732.070585] do_splice_direct+0x1a7/0x270 [ 732.074783] ? splice_direct_to_actor+0x8d0/0x8d0 [ 732.079653] ? security_file_permission+0x1c0/0x220 [ 732.084697] do_sendfile+0x550/0xc30 [ 732.088443] ? do_compat_pwritev64+0x1b0/0x1b0 [ 732.093054] ? vfs_write+0x393/0x540 [ 732.096793] __se_sys_sendfile64+0x147/0x160 [ 732.101225] ? __se_sys_sendfile+0x180/0x180 [ 732.105654] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 732.111041] ? trace_hardirqs_off_caller+0x6e/0x210 [ 732.116080] ? do_syscall_64+0x21/0x620 [ 732.120075] do_syscall_64+0xf9/0x620 [ 732.123897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 732.129104] RIP: 0033:0x7fc948a630c9 [ 732.132833] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.151772] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 732.159501] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 732.166793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 732.174081] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.181495] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 23:51:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 732.188781] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 2) 23:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090008006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090701006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x5452, &(0x7f0000000040)={0x3, 0x990001}) 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000a006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x5460, &(0x7f0000000040)={0x3, 0x990001}) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090801006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 732.315214] FAULT_INJECTION: forcing a failure. [ 732.315214] name failslab, interval 1, probability 0, space 0, times 0 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xac0e, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 732.407010] CPU: 0 PID: 16895 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 732.415080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 732.424446] Call Trace: [ 732.427059] dump_stack+0x1fc/0x2ef [ 732.430716] should_fail.cold+0xa/0xf [ 732.434549] ? setup_fault_attr+0x200/0x200 [ 732.438892] ? lock_acquire+0x170/0x3c0 [ 732.442944] __should_failslab+0x115/0x180 [ 732.447205] should_failslab+0x5/0x10 [ 732.451029] __kmalloc+0x2ab/0x3c0 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 732.454630] ? alloc_pipe_info+0x193/0x470 [ 732.458891] alloc_pipe_info+0x193/0x470 [ 732.463188] splice_direct_to_actor+0x6dd/0x8d0 [ 732.467981] ? apparmor_getprocattr+0x11e0/0x11e0 [ 732.472855] ? generic_pipe_buf_nosteal+0x10/0x10 [ 732.477724] ? do_splice_to+0x160/0x160 [ 732.481718] ? security_file_permission+0x1c0/0x220 [ 732.486765] do_splice_direct+0x1a7/0x270 [ 732.490944] ? splice_direct_to_actor+0x8d0/0x8d0 [ 732.495822] ? security_file_permission+0x1c0/0x220 [ 732.500902] do_sendfile+0x550/0xc30 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 732.504680] ? do_compat_pwritev64+0x1b0/0x1b0 [ 732.509374] ? vfs_write+0x393/0x540 [ 732.513143] __se_sys_sendfile64+0x147/0x160 [ 732.517573] ? __se_sys_sendfile+0x180/0x180 [ 732.522002] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 732.527380] ? trace_hardirqs_off_caller+0x6e/0x210 [ 732.532414] ? do_syscall_64+0x21/0x620 [ 732.536411] do_syscall_64+0xf9/0x620 [ 732.540244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 732.545434] RIP: 0033:0x7fc948a630c9 [ 732.549136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.568070] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 732.575784] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 732.583152] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 732.590526] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.597788] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 732.605217] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 3) 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090014006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x40049409, &(0x7f0000000040)={0x3, 0x990001}) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090901006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090a01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090025006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x40205667, &(0x7f0000000040)={0x3, 0x990001}) 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 732.756558] FAULT_INJECTION: forcing a failure. [ 732.756558] name failslab, interval 1, probability 0, space 0, times 0 [ 732.816101] CPU: 1 PID: 16933 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 732.824029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 732.833397] Call Trace: [ 732.836066] dump_stack+0x1fc/0x2ef [ 732.839720] should_fail.cold+0xa/0xf [ 732.843548] ? setup_fault_attr+0x200/0x200 [ 732.847892] ? lock_acquire+0x170/0x3c0 [ 732.851898] __should_failslab+0x115/0x180 [ 732.856161] should_failslab+0x5/0x10 [ 732.859984] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 732.865110] __kmalloc_node+0x38/0x70 [ 732.868934] kvmalloc_node+0x61/0xf0 [ 732.872668] iov_iter_get_pages_alloc+0x562/0x1150 [ 732.877619] ? kernel_text_address+0xbd/0xf0 [ 732.882044] ? iov_iter_bvec+0x130/0x130 [ 732.886124] ? lock_downgrade+0x720/0x720 [ 732.890288] ? iov_iter_pipe+0xb4/0x2c0 [ 732.894283] default_file_splice_read+0x191/0xa00 [ 732.899152] ? alloc_pipe_info+0x193/0x470 [ 732.903416] ? do_splice_direct+0x270/0x270 [ 732.907757] ? do_syscall_64+0xf9/0x620 [ 732.911766] ? aa_path_link+0x410/0x410 [ 732.915766] ? perf_trace_lock_acquire+0x530/0x530 [ 732.920713] ? perf_trace_lock+0xe2/0x4b0 [ 732.924888] ? perf_trace_lock_acquire+0x530/0x530 [ 732.929846] ? perf_trace_lock_acquire+0x530/0x530 [ 732.934868] ? fsnotify+0x84e/0xe10 [ 732.938522] ? fsnotify_first_mark+0x200/0x200 [ 732.943133] ? lock_acquire+0x170/0x3c0 [ 732.947138] ? check_preemption_disabled+0x41/0x280 [ 732.952186] ? security_file_permission+0x1c0/0x220 [ 732.957238] ? do_splice_direct+0x270/0x270 [ 732.961614] do_splice_to+0x10e/0x160 [ 732.965445] splice_direct_to_actor+0x2b9/0x8d0 [ 732.970141] ? generic_pipe_buf_nosteal+0x10/0x10 [ 732.975015] ? do_splice_to+0x160/0x160 [ 732.979022] do_splice_direct+0x1a7/0x270 [ 732.983196] ? splice_direct_to_actor+0x8d0/0x8d0 [ 732.988075] ? security_file_permission+0x1c0/0x220 [ 732.993255] do_sendfile+0x550/0xc30 [ 732.996976] ? do_compat_pwritev64+0x1b0/0x1b0 [ 733.001555] ? vfs_write+0x393/0x540 [ 733.005282] __se_sys_sendfile64+0x147/0x160 [ 733.009703] ? __se_sys_sendfile+0x180/0x180 [ 733.014122] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 733.019513] ? trace_hardirqs_off_caller+0x6e/0x210 [ 733.024522] ? do_syscall_64+0x21/0x620 [ 733.028488] do_syscall_64+0xf9/0x620 [ 733.032283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 733.037462] RIP: 0033:0x7fc948a630c9 [ 733.041165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.060104] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 733.067803] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 733.075059] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 733.082323] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.089708] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 733.096991] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 4) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090b01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090060006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020940d, &(0x7f0000000040)={0x3, 0x990001}) 23:51:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xa85, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090c01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xc00, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0045878, &(0x7f0000000040)={0x3, 0x990001}) 23:51:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000036373756d00000000200002801c0001"], 0x64}}, 0x0) [ 733.234539] FAULT_INJECTION: forcing a failure. [ 733.234539] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 733.299018] CPU: 0 PID: 16968 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 733.306967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 733.316448] Call Trace: [ 733.319058] dump_stack+0x1fc/0x2ef [ 733.322828] should_fail.cold+0xa/0xf [ 733.326659] ? lock_acquire+0x170/0x3c0 [ 733.330671] ? setup_fault_attr+0x200/0x200 [ 733.335033] __alloc_pages_nodemask+0x239/0x2890 [ 733.339809] ? kasan_kmalloc+0x139/0x160 [ 733.344021] ? __kmalloc_node+0x4c/0x70 23:51:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 733.348014] ? kvmalloc_node+0x61/0xf0 [ 733.351918] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 733.357126] ? default_file_splice_read+0x191/0xa00 [ 733.362163] ? do_splice_to+0x10e/0x160 [ 733.366164] ? do_sendfile+0x550/0xc30 [ 733.370074] ? __se_sys_sendfile64+0x147/0x160 [ 733.374682] ? do_syscall_64+0xf9/0x620 [ 733.378691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.383557] ? get_reg+0x1f0/0x1f0 [ 733.387126] ? check_preemption_disabled+0x41/0x280 [ 733.392171] ? should_fail+0x142/0x7b0 [ 733.396076] ? fs_reclaim_release+0xd0/0x110 [ 733.400505] ? setup_fault_attr+0x200/0x200 [ 733.404846] ? lock_acquire+0x170/0x3c0 [ 733.408843] ? check_preemption_disabled+0x41/0x280 [ 733.413967] ? __kmalloc_node+0x38/0x70 [ 733.417969] alloc_pages_current+0x193/0x2a0 [ 733.422394] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 733.427693] push_pipe+0x3e3/0x770 [ 733.431262] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 733.436215] ? kernel_text_address+0xbd/0xf0 [ 733.440649] ? iov_iter_bvec+0x130/0x130 [ 733.444729] ? lock_downgrade+0x720/0x720 [ 733.448896] ? iov_iter_pipe+0xb4/0x2c0 [ 733.452889] default_file_splice_read+0x191/0xa00 [ 733.457754] ? alloc_pipe_info+0x193/0x470 [ 733.462006] ? do_splice_direct+0x270/0x270 [ 733.466346] ? do_syscall_64+0xf9/0x620 [ 733.470339] ? aa_path_link+0x410/0x410 [ 733.474346] ? perf_trace_lock_acquire+0x530/0x530 [ 733.479311] ? perf_trace_lock+0xe2/0x4b0 [ 733.483483] ? perf_trace_lock_acquire+0x530/0x530 [ 733.488447] ? perf_trace_lock_acquire+0x530/0x530 [ 733.493398] ? fsnotify+0x84e/0xe10 [ 733.497049] ? fsnotify_first_mark+0x200/0x200 [ 733.501654] ? lock_acquire+0x170/0x3c0 [ 733.505646] ? check_preemption_disabled+0x41/0x280 [ 733.510675] ? security_file_permission+0x1c0/0x220 [ 733.515757] ? do_splice_direct+0x270/0x270 [ 733.520090] do_splice_to+0x10e/0x160 [ 733.523936] splice_direct_to_actor+0x2b9/0x8d0 [ 733.528604] ? generic_pipe_buf_nosteal+0x10/0x10 [ 733.533462] ? do_splice_to+0x160/0x160 [ 733.537458] do_splice_direct+0x1a7/0x270 [ 733.541620] ? splice_direct_to_actor+0x8d0/0x8d0 [ 733.546469] ? security_file_permission+0x1c0/0x220 [ 733.551501] do_sendfile+0x550/0xc30 [ 733.555227] ? do_compat_pwritev64+0x1b0/0x1b0 [ 733.559819] ? vfs_write+0x393/0x540 [ 733.563538] __se_sys_sendfile64+0x147/0x160 [ 733.567938] ? __se_sys_sendfile+0x180/0x180 [ 733.572355] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 733.577722] ? trace_hardirqs_off_caller+0x6e/0x210 [ 733.582750] ? do_syscall_64+0x21/0x620 [ 733.586832] do_syscall_64+0xf9/0x620 [ 733.590643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 733.595919] RIP: 0033:0x7fc948a630c9 [ 733.599639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.618630] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 733.626333] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 733.633604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 733.640881] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 23:51:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 5) 23:51:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090e01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0045878, &(0x7f0000000040)={0x3, 0x990001}) 23:51:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009a6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 733.648156] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 733.655417] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090f01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009b6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0189436, &(0x7f0000000040)={0x3, 0x990001}) [ 733.811863] FAULT_INJECTION: forcing a failure. [ 733.811863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 733.864287] CPU: 1 PID: 17005 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 733.872221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 733.881592] Call Trace: [ 733.884205] dump_stack+0x1fc/0x2ef [ 733.887868] should_fail.cold+0xa/0xf [ 733.891699] ? lock_acquire+0x170/0x3c0 [ 733.895695] ? setup_fault_attr+0x200/0x200 [ 733.900049] __alloc_pages_nodemask+0x239/0x2890 [ 733.904833] ? kasan_kmalloc+0x139/0x160 [ 733.908920] ? __kmalloc_node+0x4c/0x70 [ 733.912930] ? kvmalloc_node+0x61/0xf0 [ 733.916836] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 733.921956] ? default_file_splice_read+0x191/0xa00 [ 733.926994] ? do_splice_to+0x10e/0x160 [ 733.930989] ? do_sendfile+0x550/0xc30 [ 733.934905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.939761] ? get_reg+0x1f0/0x1f0 [ 733.943321] ? check_preemption_disabled+0x41/0x280 [ 733.948480] ? should_fail+0x142/0x7b0 [ 733.952419] ? fs_reclaim_release+0xd0/0x110 [ 733.956860] ? setup_fault_attr+0x200/0x200 [ 733.961255] ? lock_acquire+0x170/0x3c0 [ 733.965252] ? check_preemption_disabled+0x41/0x280 [ 733.970287] ? __kmalloc_node+0x38/0x70 [ 733.974286] alloc_pages_current+0x193/0x2a0 [ 733.978711] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 733.984006] push_pipe+0x3e3/0x770 [ 733.987577] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 733.992534] ? kernel_text_address+0xbd/0xf0 [ 733.996966] ? iov_iter_bvec+0x130/0x130 [ 734.001064] ? lock_downgrade+0x720/0x720 [ 734.005230] ? iov_iter_pipe+0xb4/0x2c0 [ 734.009222] default_file_splice_read+0x191/0xa00 23:51:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009c6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 734.014094] ? alloc_pipe_info+0x193/0x470 [ 734.018520] ? do_splice_direct+0x270/0x270 [ 734.022866] ? do_syscall_64+0xf9/0x620 [ 734.026865] ? aa_path_link+0x410/0x410 [ 734.030872] ? perf_trace_lock_acquire+0x530/0x530 [ 734.035824] ? perf_trace_lock+0xe2/0x4b0 [ 734.040003] ? perf_trace_lock_acquire+0x530/0x530 [ 734.044959] ? perf_trace_lock_acquire+0x530/0x530 [ 734.049915] ? fsnotify+0x84e/0xe10 [ 734.053572] ? fsnotify_first_mark+0x200/0x200 [ 734.058180] ? lock_acquire+0x170/0x3c0 [ 734.062177] ? check_preemption_disabled+0x41/0x280 [ 734.067237] ? security_file_permission+0x1c0/0x220 [ 734.072283] ? do_splice_direct+0x270/0x270 [ 734.076629] do_splice_to+0x10e/0x160 [ 734.080466] splice_direct_to_actor+0x2b9/0x8d0 [ 734.085162] ? generic_pipe_buf_nosteal+0x10/0x10 [ 734.090029] ? do_splice_to+0x160/0x160 [ 734.094032] do_splice_direct+0x1a7/0x270 [ 734.098192] ? splice_direct_to_actor+0x8d0/0x8d0 [ 734.103027] ? security_file_permission+0x1c0/0x220 [ 734.108034] do_sendfile+0x550/0xc30 [ 734.111756] ? do_compat_pwritev64+0x1b0/0x1b0 [ 734.116330] ? vfs_write+0x393/0x540 [ 734.120034] __se_sys_sendfile64+0x147/0x160 [ 734.124435] ? __se_sys_sendfile+0x180/0x180 [ 734.128841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 734.134277] ? trace_hardirqs_off_caller+0x6e/0x210 [ 734.139290] ? do_syscall_64+0x21/0x620 [ 734.143258] do_syscall_64+0xf9/0x620 [ 734.147045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 734.152218] RIP: 0033:0x7fc948a630c9 [ 734.155917] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.174805] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 734.182499] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 734.189757] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 734.197033] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.204391] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 734.211649] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 6) 23:51:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009d6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0205647, &(0x7f0000000040)={0x3, 0x990001}) 23:51:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100091001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100094801006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 734.669898] FAULT_INJECTION: forcing a failure. [ 734.669898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.720859] CPU: 0 PID: 17035 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 734.728785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 734.738154] Call Trace: [ 734.740761] dump_stack+0x1fc/0x2ef [ 734.744410] should_fail.cold+0xa/0xf [ 734.748228] ? lock_acquire+0x170/0x3c0 [ 734.752228] ? setup_fault_attr+0x200/0x200 [ 734.756716] __alloc_pages_nodemask+0x239/0x2890 [ 734.761495] ? kasan_kmalloc+0x139/0x160 [ 734.765583] ? __kmalloc_node+0x4c/0x70 [ 734.769584] ? kvmalloc_node+0x61/0xf0 [ 734.773493] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 734.778601] ? default_file_splice_read+0x191/0xa00 [ 734.783617] ? do_splice_to+0x10e/0x160 [ 734.787590] ? do_sendfile+0x550/0xc30 [ 734.791493] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 734.796339] ? get_reg+0x1f0/0x1f0 [ 734.799887] ? check_preemption_disabled+0x41/0x280 [ 734.804957] ? should_fail+0x142/0x7b0 [ 734.808836] ? fs_reclaim_release+0xd0/0x110 [ 734.813255] ? setup_fault_attr+0x200/0x200 [ 734.817591] ? lock_acquire+0x170/0x3c0 [ 734.821587] ? check_preemption_disabled+0x41/0x280 [ 734.826605] ? __kmalloc_node+0x38/0x70 [ 734.830591] alloc_pages_current+0x193/0x2a0 [ 734.835003] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 734.840284] push_pipe+0x3e3/0x770 [ 734.843827] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 734.848751] ? kernel_text_address+0xbd/0xf0 [ 734.853186] ? iov_iter_bvec+0x130/0x130 [ 734.857238] ? lock_downgrade+0x720/0x720 [ 734.861384] ? iov_iter_pipe+0xb4/0x2c0 [ 734.865388] default_file_splice_read+0x191/0xa00 [ 734.870248] ? alloc_pipe_info+0x193/0x470 [ 734.874486] ? do_splice_direct+0x270/0x270 [ 734.878796] ? do_syscall_64+0xf9/0x620 [ 734.882778] ? aa_path_link+0x410/0x410 [ 734.886756] ? perf_trace_lock_acquire+0x530/0x530 [ 734.891693] ? perf_trace_lock+0xe2/0x4b0 [ 734.895867] ? perf_trace_lock_acquire+0x530/0x530 [ 734.900813] ? perf_trace_lock_acquire+0x530/0x530 [ 734.905745] ? fsnotify+0x84e/0xe10 [ 734.909380] ? fsnotify_first_mark+0x200/0x200 [ 734.913966] ? lock_acquire+0x170/0x3c0 [ 734.917931] ? check_preemption_disabled+0x41/0x280 [ 734.922961] ? security_file_permission+0x1c0/0x220 [ 734.927984] ? do_splice_direct+0x270/0x270 [ 734.932299] do_splice_to+0x10e/0x160 [ 734.936092] splice_direct_to_actor+0x2b9/0x8d0 [ 734.940768] ? generic_pipe_buf_nosteal+0x10/0x10 [ 734.945623] ? do_splice_to+0x160/0x160 [ 734.949636] do_splice_direct+0x1a7/0x270 [ 734.953845] ? splice_direct_to_actor+0x8d0/0x8d0 [ 734.958690] ? security_file_permission+0x1c0/0x220 [ 734.963706] do_sendfile+0x550/0xc30 [ 734.967460] ? do_compat_pwritev64+0x1b0/0x1b0 [ 734.972050] ? vfs_write+0x393/0x540 [ 734.975784] __se_sys_sendfile64+0x147/0x160 [ 734.980196] ? __se_sys_sendfile+0x180/0x180 [ 734.984604] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 734.989970] ? trace_hardirqs_off_caller+0x6e/0x210 [ 734.995056] ? do_syscall_64+0x21/0x620 [ 734.999030] do_syscall_64+0xf9/0x620 [ 735.002858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 735.008050] RIP: 0033:0x7fc948a630c9 [ 735.011765] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.030679] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 735.038399] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 735.045670] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 735.052966] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.060237] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 23:51:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0205649, &(0x7f0000000040)={0x3, 0x990001}) 23:51:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009e6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100094c01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 735.067508] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 7) 23:51:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc020660b, &(0x7f0000000040)={0x3, 0x990001}) 23:51:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x6558, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009f6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096001006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x990001}) 23:51:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a06373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096801006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x850a, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 735.600604] FAULT_INJECTION: forcing a failure. [ 735.600604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.676965] CPU: 1 PID: 17074 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 735.684895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 735.694265] Call Trace: [ 735.696874] dump_stack+0x1fc/0x2ef [ 735.700529] should_fail.cold+0xa/0xf [ 735.704350] ? lock_acquire+0x170/0x3c0 [ 735.708349] ? setup_fault_attr+0x200/0x200 [ 735.712702] __alloc_pages_nodemask+0x239/0x2890 [ 735.717488] ? kasan_kmalloc+0x139/0x160 [ 735.721573] ? __kmalloc_node+0x4c/0x70 [ 735.725566] ? kvmalloc_node+0x61/0xf0 [ 735.729471] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 735.734591] ? default_file_splice_read+0x191/0xa00 [ 735.739628] ? do_splice_to+0x10e/0x160 [ 735.743626] ? do_sendfile+0x550/0xc30 [ 735.747535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 735.752397] ? get_reg+0x1f0/0x1f0 [ 735.755959] ? check_preemption_disabled+0x41/0x280 [ 735.761002] ? should_fail+0x142/0x7b0 [ 735.765017] ? fs_reclaim_release+0xd0/0x110 [ 735.769558] ? setup_fault_attr+0x200/0x200 [ 735.773869] ? lock_acquire+0x170/0x3c0 [ 735.777842] ? check_preemption_disabled+0x41/0x280 [ 735.782850] ? __kmalloc_node+0x38/0x70 [ 735.786824] alloc_pages_current+0x193/0x2a0 [ 735.791250] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 735.796522] push_pipe+0x3e3/0x770 [ 735.800062] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 735.805096] ? kernel_text_address+0xbd/0xf0 [ 735.809674] ? iov_iter_bvec+0x130/0x130 [ 735.813780] ? lock_downgrade+0x720/0x720 [ 735.817922] ? iov_iter_pipe+0xb4/0x2c0 [ 735.821908] default_file_splice_read+0x191/0xa00 [ 735.826767] ? alloc_pipe_info+0x193/0x470 [ 735.831022] ? do_splice_direct+0x270/0x270 [ 735.835351] ? do_syscall_64+0xf9/0x620 [ 735.839339] ? aa_path_link+0x410/0x410 [ 735.843321] ? perf_trace_lock_acquire+0x530/0x530 [ 735.848286] ? perf_trace_lock+0xe2/0x4b0 [ 735.852460] ? perf_trace_lock_acquire+0x530/0x530 [ 735.857385] ? perf_trace_lock_acquire+0x530/0x530 [ 735.862309] ? fsnotify+0x84e/0xe10 [ 735.865945] ? fsnotify_first_mark+0x200/0x200 [ 735.870519] ? lock_acquire+0x170/0x3c0 [ 735.874491] ? check_preemption_disabled+0x41/0x280 [ 735.879503] ? security_file_permission+0x1c0/0x220 [ 735.884520] ? do_splice_direct+0x270/0x270 [ 735.888839] do_splice_to+0x10e/0x160 [ 735.892656] splice_direct_to_actor+0x2b9/0x8d0 [ 735.897331] ? generic_pipe_buf_nosteal+0x10/0x10 [ 735.902170] ? do_splice_to+0x160/0x160 [ 735.906280] do_splice_direct+0x1a7/0x270 [ 735.910427] ? splice_direct_to_actor+0x8d0/0x8d0 [ 735.915269] ? security_file_permission+0x1c0/0x220 [ 735.920297] do_sendfile+0x550/0xc30 [ 735.924044] ? do_compat_pwritev64+0x1b0/0x1b0 [ 735.928632] ? vfs_write+0x393/0x540 [ 735.932339] __se_sys_sendfile64+0x147/0x160 [ 735.936738] ? __se_sys_sendfile+0x180/0x180 [ 735.941141] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 735.946507] ? trace_hardirqs_off_caller+0x6e/0x210 [ 735.951515] ? do_syscall_64+0x21/0x620 [ 735.955485] do_syscall_64+0xf9/0x620 [ 735.959280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 735.964465] RIP: 0033:0x7fc948a630c9 [ 735.968168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.987087] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 735.994831] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 736.002099] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 736.009371] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.016652] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 736.023920] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 8) 23:51:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xac0e0000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a16373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100096c01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x990001}) 23:51:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585609, &(0x7f0000000040)={0x3, 0x990001}) [ 736.508748] nla_parse: 54 callbacks suppressed [ 736.508760] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:51:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xc00e0000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a26373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100097401006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc058560f, &(0x7f0000000040)={0x3, 0x990001}) [ 736.549685] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.568611] FAULT_INJECTION: forcing a failure. [ 736.568611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.572799] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 736.663958] CPU: 1 PID: 17112 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 736.671889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 736.679889] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.681358] Call Trace: [ 736.681382] dump_stack+0x1fc/0x2ef [ 736.681402] should_fail.cold+0xa/0xf [ 736.699992] ? lock_acquire+0x170/0x3c0 [ 736.703986] ? setup_fault_attr+0x200/0x200 [ 736.706586] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 736.708327] __alloc_pages_nodemask+0x239/0x2890 [ 736.708348] ? kasan_kmalloc+0x139/0x160 [ 736.725749] ? __kmalloc_node+0x4c/0x70 [ 736.729793] ? kvmalloc_node+0x61/0xf0 [ 736.733707] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 736.738823] ? default_file_splice_read+0x191/0xa00 [ 736.743858] ? do_splice_to+0x10e/0x160 [ 736.747848] ? do_sendfile+0x550/0xc30 [ 736.751767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 736.756623] ? get_reg+0x1f0/0x1f0 [ 736.760180] ? check_preemption_disabled+0x41/0x280 [ 736.765217] ? should_fail+0x142/0x7b0 [ 736.769117] ? fs_reclaim_release+0xd0/0x110 [ 736.773540] ? setup_fault_attr+0x200/0x200 [ 736.777882] ? lock_acquire+0x170/0x3c0 [ 736.781879] ? check_preemption_disabled+0x41/0x280 [ 736.786982] ? __kmalloc_node+0x38/0x70 [ 736.790987] alloc_pages_current+0x193/0x2a0 [ 736.795437] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 736.800729] push_pipe+0x3e3/0x770 [ 736.804286] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 736.809237] ? kernel_text_address+0xbd/0xf0 [ 736.813654] ? iov_iter_bvec+0x130/0x130 [ 736.817761] ? lock_downgrade+0x720/0x720 [ 736.821910] ? iov_iter_pipe+0xb4/0x2c0 [ 736.825877] default_file_splice_read+0x191/0xa00 [ 736.830781] ? alloc_pipe_info+0x193/0x470 [ 736.835007] ? do_splice_direct+0x270/0x270 [ 736.839317] ? do_syscall_64+0xf9/0x620 [ 736.843326] ? aa_path_link+0x410/0x410 [ 736.847288] ? perf_trace_lock_acquire+0x530/0x530 [ 736.852203] ? perf_trace_lock+0xe2/0x4b0 [ 736.856359] ? perf_trace_lock_acquire+0x530/0x530 [ 736.861273] ? perf_trace_lock_acquire+0x530/0x530 [ 736.866188] ? fsnotify+0x84e/0xe10 [ 736.869801] ? fsnotify_first_mark+0x200/0x200 [ 736.874387] ? lock_acquire+0x170/0x3c0 [ 736.878348] ? check_preemption_disabled+0x41/0x280 [ 736.883355] ? security_file_permission+0x1c0/0x220 [ 736.888372] ? do_splice_direct+0x270/0x270 [ 736.892683] do_splice_to+0x10e/0x160 [ 736.896470] splice_direct_to_actor+0x2b9/0x8d0 [ 736.901126] ? generic_pipe_buf_nosteal+0x10/0x10 [ 736.905957] ? do_splice_to+0x160/0x160 [ 736.909940] do_splice_direct+0x1a7/0x270 [ 736.914074] ? splice_direct_to_actor+0x8d0/0x8d0 [ 736.918909] ? security_file_permission+0x1c0/0x220 [ 736.923922] do_sendfile+0x550/0xc30 [ 736.927637] ? do_compat_pwritev64+0x1b0/0x1b0 [ 736.932206] ? vfs_write+0x393/0x540 [ 736.935926] __se_sys_sendfile64+0x147/0x160 [ 736.940319] ? __se_sys_sendfile+0x180/0x180 [ 736.944726] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 736.950074] ? trace_hardirqs_off_caller+0x6e/0x210 [ 736.955076] ? do_syscall_64+0x21/0x620 [ 736.959049] do_syscall_64+0xf9/0x620 [ 736.962850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 736.968046] RIP: 0033:0x7fc948a630c9 [ 736.971755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.990657] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 736.998351] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 737.005603] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 737.012856] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.020110] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 737.027379] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 9) 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0585611, &(0x7f0000000040)={0x3, 0x990001}) 23:51:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100097a01006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a36373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 737.499733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 737.525641] FAULT_INJECTION: forcing a failure. [ 737.525641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.535495] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.539117] CPU: 1 PID: 17144 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 737.553972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 737.563337] Call Trace: [ 737.565936] dump_stack+0x1fc/0x2ef [ 737.569585] should_fail.cold+0xa/0xf [ 737.573410] ? lock_acquire+0x170/0x3c0 [ 737.577395] ? setup_fault_attr+0x200/0x200 [ 737.581743] __alloc_pages_nodemask+0x239/0x2890 [ 737.586520] ? kasan_kmalloc+0x139/0x160 [ 737.590600] ? __kmalloc_node+0x4c/0x70 [ 737.594584] ? kvmalloc_node+0x61/0xf0 [ 737.598483] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 737.603596] ? default_file_splice_read+0x191/0xa00 [ 737.608625] ? do_splice_to+0x10e/0x160 [ 737.612616] ? do_sendfile+0x550/0xc30 [ 737.616534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 737.621388] ? get_reg+0x1f0/0x1f0 [ 737.625044] ? check_preemption_disabled+0x41/0x280 [ 737.630077] ? should_fail+0x142/0x7b0 [ 737.633980] ? fs_reclaim_release+0xd0/0x110 [ 737.638409] ? setup_fault_attr+0x200/0x200 [ 737.642755] ? lock_acquire+0x170/0x3c0 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc058565d, &(0x7f0000000040)={0x3, 0x990001}) 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x990001}) [ 737.646751] ? check_preemption_disabled+0x41/0x280 [ 737.651911] ? __kmalloc_node+0x38/0x70 [ 737.655914] alloc_pages_current+0x193/0x2a0 [ 737.660336] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 737.665630] push_pipe+0x3e3/0x770 [ 737.669203] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 737.674156] ? kernel_text_address+0xbd/0xf0 [ 737.678589] ? iov_iter_bvec+0x130/0x130 [ 737.682667] ? lock_downgrade+0x720/0x720 [ 737.686825] ? iov_iter_pipe+0xb4/0x2c0 [ 737.690814] default_file_splice_read+0x191/0xa00 [ 737.695681] ? alloc_pipe_info+0x193/0x470 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990300}) [ 737.699931] ? do_splice_direct+0x270/0x270 [ 737.704265] ? do_syscall_64+0xf9/0x620 [ 737.708292] ? aa_path_link+0x410/0x410 [ 737.712283] ? perf_trace_lock_acquire+0x530/0x530 [ 737.717223] ? perf_trace_lock+0xe2/0x4b0 [ 737.721394] ? perf_trace_lock_acquire+0x530/0x530 [ 737.726344] ? perf_trace_lock_acquire+0x530/0x530 [ 737.731294] ? fsnotify+0x84e/0xe10 [ 737.734944] ? fsnotify_first_mark+0x200/0x200 [ 737.739542] ? lock_acquire+0x170/0x3c0 [ 737.743542] ? check_preemption_disabled+0x41/0x280 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x9909cb}) 23:51:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 737.748583] ? security_file_permission+0x1c0/0x220 [ 737.753621] ? do_splice_direct+0x270/0x270 [ 737.757976] do_splice_to+0x10e/0x160 [ 737.758409] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.761793] splice_direct_to_actor+0x2b9/0x8d0 [ 737.761816] ? generic_pipe_buf_nosteal+0x10/0x10 [ 737.761836] ? do_splice_to+0x160/0x160 [ 737.761858] do_splice_direct+0x1a7/0x270 [ 737.761877] ? splice_direct_to_actor+0x8d0/0x8d0 [ 737.792945] ? security_file_permission+0x1c0/0x220 [ 737.797992] do_sendfile+0x550/0xc30 [ 737.801737] ? do_compat_pwritev64+0x1b0/0x1b0 [ 737.806343] ? vfs_write+0x393/0x540 [ 737.810081] __se_sys_sendfile64+0x147/0x160 [ 737.814507] ? __se_sys_sendfile+0x180/0x180 [ 737.818929] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 737.824314] ? trace_hardirqs_off_caller+0x6e/0x210 [ 737.829348] ? do_syscall_64+0x21/0x620 [ 737.833342] do_syscall_64+0xf9/0x620 [ 737.837163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 737.842370] RIP: 0033:0x7fc948a630c9 23:51:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 737.846094] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 737.865091] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 737.872902] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 737.880187] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 737.887467] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.894755] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000001 [ 737.902040] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 10) 23:51:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090003006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xe7}) 23:51:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001000a73756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xe7ff}) 23:51:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 738.400324] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 738.426949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:51:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090007006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001002573756d00000000200002801c0001"], 0x64}}, 0x0) [ 738.507141] FAULT_INJECTION: forcing a failure. [ 738.507141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:51:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xfdfd}) [ 738.551254] CPU: 1 PID: 17190 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 738.559190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 738.568567] Call Trace: [ 738.571173] dump_stack+0x1fc/0x2ef [ 738.574826] should_fail.cold+0xa/0xf [ 738.578669] ? lock_acquire+0x170/0x3c0 [ 738.582791] ? setup_fault_attr+0x200/0x200 [ 738.587142] __alloc_pages_nodemask+0x239/0x2890 [ 738.591922] ? kasan_kmalloc+0x139/0x160 [ 738.596009] ? __kmalloc_node+0x4c/0x70 [ 738.600001] ? kvmalloc_node+0x61/0xf0 [ 738.603902] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 738.609021] ? default_file_splice_read+0x191/0xa00 [ 738.614055] ? do_splice_to+0x10e/0x160 [ 738.618050] ? do_sendfile+0x550/0xc30 [ 738.621971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 738.626825] ? get_reg+0x1f0/0x1f0 [ 738.630388] ? check_preemption_disabled+0x41/0x280 [ 738.635424] ? should_fail+0x142/0x7b0 [ 738.639329] ? fs_reclaim_release+0xd0/0x110 [ 738.643755] ? setup_fault_attr+0x200/0x200 [ 738.648099] ? lock_acquire+0x170/0x3c0 [ 738.652097] ? check_preemption_disabled+0x41/0x280 [ 738.657133] ? __kmalloc_node+0x38/0x70 [ 738.661130] alloc_pages_current+0x193/0x2a0 [ 738.665560] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 738.670852] push_pipe+0x3e3/0x770 [ 738.674414] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 738.679360] ? kernel_text_address+0xbd/0xf0 [ 738.683785] ? iov_iter_bvec+0x130/0x130 [ 738.687864] ? lock_downgrade+0x720/0x720 [ 738.692023] ? iov_iter_pipe+0xb4/0x2c0 [ 738.696014] default_file_splice_read+0x191/0xa00 [ 738.700865] ? alloc_pipe_info+0x193/0x470 [ 738.705098] ? do_splice_direct+0x270/0x270 [ 738.709422] ? do_syscall_64+0xf9/0x620 [ 738.713406] ? aa_path_link+0x410/0x410 [ 738.717371] ? perf_trace_lock_acquire+0x530/0x530 [ 738.722288] ? perf_trace_lock+0xe2/0x4b0 [ 738.726446] ? perf_trace_lock_acquire+0x530/0x530 [ 738.731363] ? perf_trace_lock_acquire+0x530/0x530 [ 738.736282] ? fsnotify+0x84e/0xe10 [ 738.739898] ? fsnotify_first_mark+0x200/0x200 [ 738.744465] ? lock_acquire+0x170/0x3c0 [ 738.748428] ? check_preemption_disabled+0x41/0x280 [ 738.753437] ? security_file_permission+0x1c0/0x220 [ 738.758442] ? do_splice_direct+0x270/0x270 [ 738.762753] do_splice_to+0x10e/0x160 [ 738.766546] splice_direct_to_actor+0x2b9/0x8d0 [ 738.771219] ? generic_pipe_buf_nosteal+0x10/0x10 [ 738.776052] ? do_splice_to+0x160/0x160 [ 738.780020] do_splice_direct+0x1a7/0x270 [ 738.784156] ? splice_direct_to_actor+0x8d0/0x8d0 [ 738.788989] ? security_file_permission+0x1c0/0x220 [ 738.793995] do_sendfile+0x550/0xc30 [ 738.797701] ? do_compat_pwritev64+0x1b0/0x1b0 [ 738.802274] ? vfs_write+0x393/0x540 [ 738.805984] __se_sys_sendfile64+0x147/0x160 [ 738.810396] ? __se_sys_sendfile+0x180/0x180 [ 738.814805] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 738.820157] ? trace_hardirqs_off_caller+0x6e/0x210 [ 738.825161] ? do_syscall_64+0x21/0x620 [ 738.829124] do_syscall_64+0xf9/0x620 [ 738.832925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 738.838104] RIP: 0033:0x7fc948a630c9 [ 738.841805] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 738.860696] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 738.868395] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 738.875655] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 738.882912] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.890190] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 738.897454] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 11) 23:51:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xffe7}) 23:51:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090014006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001026373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001036373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:53 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xe7ffffff}) 23:51:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090020006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 739.406216] FAULT_INJECTION: forcing a failure. [ 739.406216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 739.481524] CPU: 1 PID: 17225 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 739.489449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 739.498829] Call Trace: [ 739.501437] dump_stack+0x1fc/0x2ef [ 739.505088] should_fail.cold+0xa/0xf [ 739.508906] ? lock_acquire+0x170/0x3c0 [ 739.512900] ? setup_fault_attr+0x200/0x200 [ 739.517249] __alloc_pages_nodemask+0x239/0x2890 [ 739.522062] ? kasan_kmalloc+0x139/0x160 [ 739.526150] ? __kmalloc_node+0x4c/0x70 [ 739.530141] ? kvmalloc_node+0x61/0xf0 [ 739.534051] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 739.539172] ? default_file_splice_read+0x191/0xa00 [ 739.544203] ? do_splice_to+0x10e/0x160 [ 739.548193] ? do_sendfile+0x550/0xc30 [ 739.552127] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 739.556983] ? get_reg+0x1f0/0x1f0 [ 739.560547] ? check_preemption_disabled+0x41/0x280 [ 739.565582] ? should_fail+0x142/0x7b0 [ 739.569483] ? fs_reclaim_release+0xd0/0x110 [ 739.573911] ? setup_fault_attr+0x200/0x200 [ 739.578243] ? lock_acquire+0x170/0x3c0 [ 739.582242] ? check_preemption_disabled+0x41/0x280 [ 739.587275] ? __kmalloc_node+0x38/0x70 [ 739.591269] alloc_pages_current+0x193/0x2a0 [ 739.595696] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 739.600986] push_pipe+0x3e3/0x770 [ 739.604552] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 739.609509] ? kernel_text_address+0xbd/0xf0 [ 739.613935] ? iov_iter_bvec+0x130/0x130 [ 739.618012] ? lock_downgrade+0x720/0x720 [ 739.622170] ? iov_iter_pipe+0xb4/0x2c0 [ 739.626162] default_file_splice_read+0x191/0xa00 23:51:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090025006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 739.631034] ? alloc_pipe_info+0x193/0x470 [ 739.635282] ? do_splice_direct+0x270/0x270 [ 739.639618] ? do_syscall_64+0xf9/0x620 [ 739.643609] ? aa_path_link+0x410/0x410 [ 739.647606] ? perf_trace_lock_acquire+0x530/0x530 [ 739.652553] ? perf_trace_lock+0xe2/0x4b0 [ 739.656722] ? perf_trace_lock_acquire+0x530/0x530 [ 739.661678] ? perf_trace_lock_acquire+0x530/0x530 [ 739.666625] ? fsnotify+0x84e/0xe10 [ 739.670272] ? fsnotify_first_mark+0x200/0x200 [ 739.674870] ? lock_acquire+0x170/0x3c0 [ 739.678862] ? check_preemption_disabled+0x41/0x280 [ 739.683901] ? security_file_permission+0x1c0/0x220 [ 739.688938] ? do_splice_direct+0x270/0x270 [ 739.693299] do_splice_to+0x10e/0x160 [ 739.697092] splice_direct_to_actor+0x2b9/0x8d0 [ 739.701799] ? generic_pipe_buf_nosteal+0x10/0x10 [ 739.706636] ? do_splice_to+0x160/0x160 [ 739.710606] do_splice_direct+0x1a7/0x270 [ 739.714744] ? splice_direct_to_actor+0x8d0/0x8d0 [ 739.719578] ? security_file_permission+0x1c0/0x220 [ 739.724595] do_sendfile+0x550/0xc30 [ 739.728300] ? do_compat_pwritev64+0x1b0/0x1b0 [ 739.732902] ? vfs_write+0x393/0x540 [ 739.736610] __se_sys_sendfile64+0x147/0x160 [ 739.741005] ? __se_sys_sendfile+0x180/0x180 [ 739.745399] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 739.750757] ? trace_hardirqs_off_caller+0x6e/0x210 [ 739.755801] ? do_syscall_64+0x21/0x620 [ 739.759789] do_syscall_64+0xf9/0x620 [ 739.763580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 739.768759] RIP: 0033:0x7fc948a630c9 [ 739.772472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 739.791367] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 739.799065] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 739.806320] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 739.813581] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.820836] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 739.828112] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 12) 23:51:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xf, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090031006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xfdfdffff}) 23:51:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001046373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009003f006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 740.380180] FAULT_INJECTION: forcing a failure. [ 740.380180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.399833] CPU: 1 PID: 17261 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 740.407775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 740.417175] Call Trace: [ 740.419783] dump_stack+0x1fc/0x2ef [ 740.423434] should_fail.cold+0xa/0xf 23:51:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xfffffdfd}) [ 740.427252] ? lock_acquire+0x170/0x3c0 [ 740.431241] ? setup_fault_attr+0x200/0x200 [ 740.435598] __alloc_pages_nodemask+0x239/0x2890 [ 740.440370] ? kasan_kmalloc+0x139/0x160 [ 740.444483] ? __kmalloc_node+0x4c/0x70 [ 740.448474] ? kvmalloc_node+0x61/0xf0 [ 740.452437] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 740.457556] ? default_file_splice_read+0x191/0xa00 [ 740.462590] ? do_splice_to+0x10e/0x160 [ 740.466585] ? do_sendfile+0x550/0xc30 [ 740.470500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.475362] ? get_reg+0x1f0/0x1f0 23:51:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090060006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 740.478929] ? check_preemption_disabled+0x41/0x280 [ 740.483969] ? should_fail+0x142/0x7b0 [ 740.487871] ? fs_reclaim_release+0xd0/0x110 [ 740.492304] ? setup_fault_attr+0x200/0x200 [ 740.496642] ? lock_acquire+0x170/0x3c0 [ 740.500636] ? check_preemption_disabled+0x41/0x280 [ 740.505668] ? __kmalloc_node+0x38/0x70 [ 740.509672] alloc_pages_current+0x193/0x2a0 [ 740.514105] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 740.519407] push_pipe+0x3e3/0x770 [ 740.522974] iov_iter_get_pages_alloc+0x5b1/0x1150 23:51:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xffffffe7}) [ 740.527935] ? kernel_text_address+0xbd/0xf0 [ 740.532368] ? iov_iter_bvec+0x130/0x130 [ 740.536452] ? lock_downgrade+0x720/0x720 [ 740.540611] ? iov_iter_pipe+0xb4/0x2c0 [ 740.544602] default_file_splice_read+0x191/0xa00 [ 740.549603] ? alloc_pipe_info+0x193/0x470 [ 740.553961] ? do_splice_direct+0x270/0x270 [ 740.558302] ? do_syscall_64+0xf9/0x620 [ 740.562290] ? aa_path_link+0x410/0x410 [ 740.566282] ? perf_trace_lock_acquire+0x530/0x530 [ 740.571225] ? perf_trace_lock+0xe2/0x4b0 [ 740.575392] ? perf_trace_lock_acquire+0x530/0x530 [ 740.580334] ? perf_trace_lock_acquire+0x530/0x530 [ 740.585282] ? fsnotify+0x84e/0xe10 [ 740.588935] ? fsnotify_first_mark+0x200/0x200 [ 740.593531] ? lock_acquire+0x170/0x3c0 [ 740.597524] ? check_preemption_disabled+0x41/0x280 [ 740.602564] ? security_file_permission+0x1c0/0x220 [ 740.607609] ? do_splice_direct+0x270/0x270 [ 740.611953] do_splice_to+0x10e/0x160 [ 740.615780] splice_direct_to_actor+0x2b9/0x8d0 [ 740.620470] ? generic_pipe_buf_nosteal+0x10/0x10 [ 740.625450] ? do_splice_to+0x160/0x160 [ 740.629463] do_splice_direct+0x1a7/0x270 [ 740.633648] ? splice_direct_to_actor+0x8d0/0x8d0 [ 740.638528] ? security_file_permission+0x1c0/0x220 [ 740.643579] do_sendfile+0x550/0xc30 [ 740.647321] ? do_compat_pwritev64+0x1b0/0x1b0 [ 740.651927] ? vfs_write+0x393/0x540 [ 740.655664] __se_sys_sendfile64+0x147/0x160 [ 740.660093] ? __se_sys_sendfile+0x180/0x180 [ 740.664520] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 740.669901] ? trace_hardirqs_off_caller+0x6e/0x210 [ 740.674930] ? do_syscall_64+0x21/0x620 [ 740.678922] do_syscall_64+0xf9/0x620 [ 740.682742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.687947] RIP: 0033:0x7fc948a630c9 [ 740.691688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 740.710597] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 740.718295] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 740.725553] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 740.732822] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 740.740083] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 740.747341] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 13) 23:51:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090002006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0xffffffff}) 23:51:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x64, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001056373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001066373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:51:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090003006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 741.272284] FAULT_INJECTION: forcing a failure. [ 741.272284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 741.313864] CPU: 1 PID: 17303 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 741.321794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 741.331163] Call Trace: [ 741.333770] dump_stack+0x1fc/0x2ef [ 741.337476] should_fail.cold+0xa/0xf [ 741.341309] ? lock_acquire+0x170/0x3c0 [ 741.345309] ? setup_fault_attr+0x200/0x200 [ 741.349663] __alloc_pages_nodemask+0x239/0x2890 [ 741.354441] ? kasan_kmalloc+0x139/0x160 [ 741.358519] ? __kmalloc_node+0x4c/0x70 [ 741.362521] ? kvmalloc_node+0x61/0xf0 [ 741.366431] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 741.371568] ? default_file_splice_read+0x191/0xa00 [ 741.376600] ? do_splice_to+0x10e/0x160 [ 741.380591] ? do_sendfile+0x550/0xc30 [ 741.384510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 741.389369] ? get_reg+0x1f0/0x1f0 [ 741.392930] ? check_preemption_disabled+0x41/0x280 [ 741.397983] ? should_fail+0x142/0x7b0 [ 741.401915] ? fs_reclaim_release+0xd0/0x110 [ 741.406351] ? setup_fault_attr+0x200/0x200 23:51:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090004006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 741.410692] ? lock_acquire+0x170/0x3c0 [ 741.414686] ? check_preemption_disabled+0x41/0x280 [ 741.419848] ? __kmalloc_node+0x38/0x70 [ 741.423839] alloc_pages_current+0x193/0x2a0 [ 741.428260] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 741.433553] push_pipe+0x3e3/0x770 [ 741.437116] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 741.442082] ? kernel_text_address+0xbd/0xf0 [ 741.446516] ? iov_iter_bvec+0x130/0x130 [ 741.450760] ? lock_downgrade+0x720/0x720 [ 741.454914] ? iov_iter_pipe+0xb4/0x2c0 [ 741.458929] default_file_splice_read+0x191/0xa00 [ 741.463790] ? alloc_pipe_info+0x193/0x470 [ 741.468045] ? do_splice_direct+0x270/0x270 [ 741.472378] ? do_syscall_64+0xf9/0x620 [ 741.476397] ? aa_path_link+0x410/0x410 [ 741.480389] ? perf_trace_lock_acquire+0x530/0x530 [ 741.485331] ? perf_trace_lock+0xe2/0x4b0 [ 741.489507] ? perf_trace_lock_acquire+0x530/0x530 [ 741.494570] ? perf_trace_lock_acquire+0x530/0x530 [ 741.499516] ? fsnotify+0x84e/0xe10 [ 741.503159] ? fsnotify_first_mark+0x200/0x200 [ 741.507759] ? lock_acquire+0x170/0x3c0 [ 741.511751] ? check_preemption_disabled+0x41/0x280 [ 741.516794] ? security_file_permission+0x1c0/0x220 [ 741.521826] ? do_splice_direct+0x270/0x270 [ 741.526182] do_splice_to+0x10e/0x160 [ 741.530015] splice_direct_to_actor+0x2b9/0x8d0 [ 741.534703] ? generic_pipe_buf_nosteal+0x10/0x10 [ 741.539590] ? do_splice_to+0x160/0x160 [ 741.543599] do_splice_direct+0x1a7/0x270 [ 741.547757] ? splice_direct_to_actor+0x8d0/0x8d0 [ 741.552600] ? security_file_permission+0x1c0/0x220 [ 741.557614] do_sendfile+0x550/0xc30 [ 741.561319] ? do_compat_pwritev64+0x1b0/0x1b0 [ 741.565897] ? vfs_write+0x393/0x540 [ 741.569636] __se_sys_sendfile64+0x147/0x160 [ 741.574053] ? __se_sys_sendfile+0x180/0x180 [ 741.578455] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 741.583810] ? trace_hardirqs_off_caller+0x6e/0x210 [ 741.588822] ? do_syscall_64+0x21/0x620 [ 741.592794] do_syscall_64+0xf9/0x620 [ 741.596583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.601757] RIP: 0033:0x7fc948a630c9 [ 741.605456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.624345] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 741.632040] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 741.639306] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 741.646643] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.653905] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 741.661165] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:55 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 14) 23:51:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:51:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090007006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xec0, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001076373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:55 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) [ 742.118285] nla_parse: 23 callbacks suppressed [ 742.118296] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.149001] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001086373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x33fe0, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 742.175764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.181147] FAULT_INJECTION: forcing a failure. [ 742.181147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:51:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090008006373756d00000000200002801c0001"], 0x64}}, 0x0) [ 742.272341] CPU: 0 PID: 17339 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 742.280285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 742.289647] Call Trace: [ 742.292266] dump_stack+0x1fc/0x2ef [ 742.295914] should_fail.cold+0xa/0xf [ 742.299735] ? lock_acquire+0x170/0x3c0 [ 742.302970] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.303727] ? setup_fault_attr+0x200/0x200 [ 742.316643] __alloc_pages_nodemask+0x239/0x2890 [ 742.321422] ? kasan_kmalloc+0x139/0x160 [ 742.325503] ? __kmalloc_node+0x4c/0x70 [ 742.329496] ? kvmalloc_node+0x61/0xf0 [ 742.331751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.333392] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 742.333406] ? default_file_splice_read+0x191/0xa00 [ 742.333425] ? do_splice_to+0x10e/0x160 [ 742.356064] ? do_sendfile+0x550/0xc30 [ 742.359971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 742.364913] ? get_reg+0x1f0/0x1f0 [ 742.368471] ? check_preemption_disabled+0x41/0x280 [ 742.373507] ? should_fail+0x142/0x7b0 [ 742.377407] ? fs_reclaim_release+0xd0/0x110 [ 742.380870] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.381825] ? setup_fault_attr+0x200/0x200 [ 742.381840] ? lock_acquire+0x170/0x3c0 [ 742.381860] ? check_preemption_disabled+0x41/0x280 [ 742.403715] ? __kmalloc_node+0x38/0x70 [ 742.407700] alloc_pages_current+0x193/0x2a0 [ 742.412115] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 742.417401] push_pipe+0x3e3/0x770 [ 742.420959] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 742.425911] ? kernel_text_address+0xbd/0xf0 [ 742.430336] ? iov_iter_bvec+0x130/0x130 [ 742.434465] ? lock_downgrade+0x720/0x720 [ 742.438640] ? iov_iter_pipe+0xb4/0x2c0 [ 742.442627] default_file_splice_read+0x191/0xa00 [ 742.447493] ? alloc_pipe_info+0x193/0x470 [ 742.451742] ? do_splice_direct+0x270/0x270 [ 742.456074] ? do_syscall_64+0xf9/0x620 [ 742.460058] ? aa_path_link+0x410/0x410 [ 742.464054] ? perf_trace_lock_acquire+0x530/0x530 [ 742.469007] ? perf_trace_lock+0xe2/0x4b0 23:51:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001096373756d00000000200002801c0001"], 0x64}}, 0x0) [ 742.473207] ? perf_trace_lock_acquire+0x530/0x530 [ 742.478149] ? perf_trace_lock_acquire+0x530/0x530 [ 742.483097] ? fsnotify+0x84e/0xe10 [ 742.486743] ? fsnotify_first_mark+0x200/0x200 [ 742.491337] ? lock_acquire+0x170/0x3c0 [ 742.495323] ? check_preemption_disabled+0x41/0x280 [ 742.500400] ? security_file_permission+0x1c0/0x220 [ 742.505431] ? do_splice_direct+0x270/0x270 [ 742.505486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.509761] do_splice_to+0x10e/0x160 [ 742.509782] splice_direct_to_actor+0x2b9/0x8d0 [ 742.509801] ? generic_pipe_buf_nosteal+0x10/0x10 [ 742.509819] ? do_splice_to+0x160/0x160 [ 742.509843] do_splice_direct+0x1a7/0x270 [ 742.509861] ? splice_direct_to_actor+0x8d0/0x8d0 [ 742.509883] ? security_file_permission+0x1c0/0x220 [ 742.509906] do_sendfile+0x550/0xc30 [ 742.509929] ? do_compat_pwritev64+0x1b0/0x1b0 [ 742.509944] ? vfs_write+0x393/0x540 [ 742.509963] __se_sys_sendfile64+0x147/0x160 [ 742.566117] ? __se_sys_sendfile+0x180/0x180 [ 742.570544] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 742.575925] ? trace_hardirqs_off_caller+0x6e/0x210 [ 742.580959] ? do_syscall_64+0x21/0x620 [ 742.584954] do_syscall_64+0xf9/0x620 [ 742.588774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 742.593978] RIP: 0033:0x7fc948a630c9 [ 742.597697] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 742.616597] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 742.624296] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 742.631550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 742.638813] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 742.646128] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 742.653509] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:56 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 15) 23:51:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010a6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090014006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000180000000000", @ANYRES32=r0, @ANYBLOB="eb4e0000000000002e2f66696c653000"]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/radio_mr800', 0x1012c0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x38, 0x48, 0x100, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, 0x0, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x8880) r6 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8100}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1f9ee}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0x2}}]}}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1d, 0x2, 0xf9, 0x80000000, 0x980, r1, 0x400, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x48) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0xcadd, 0xa, 0x4, 0x800, 0x5, {}, {0x5, 0x8, 0x81, 0x4, 0x8, 0x1, "e900e45c"}, 0x6, 0x3, {&(0x7f0000000080)=[{0x0, 0x1ede2078, {0x8}}, {0x54896a3e, 0x8, {0x2}, 0x6}]}, 0x1ef, 0x0, r8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc1}) 23:51:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2000009c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x7ffff000, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 743.122223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.151560] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:51:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090025006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 743.175792] FAULT_INJECTION: forcing a failure. [ 743.175792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.190906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 743.226097] CPU: 1 PID: 17379 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 743.234016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 743.243382] Call Trace: [ 743.245985] dump_stack+0x1fc/0x2ef [ 743.249630] should_fail.cold+0xa/0xf [ 743.253442] ? lock_acquire+0x170/0x3c0 [ 743.257431] ? setup_fault_attr+0x200/0x200 [ 743.261779] __alloc_pages_nodemask+0x239/0x2890 [ 743.266551] ? kasan_kmalloc+0x139/0x160 [ 743.270637] ? __kmalloc_node+0x4c/0x70 [ 743.274625] ? kvmalloc_node+0x61/0xf0 [ 743.278521] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 743.283626] ? default_file_splice_read+0x191/0xa00 [ 743.288660] ? do_splice_to+0x10e/0x160 [ 743.292647] ? do_sendfile+0x550/0xc30 [ 743.296552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 743.301405] ? get_reg+0x1f0/0x1f0 [ 743.304963] ? check_preemption_disabled+0x41/0x280 [ 743.309999] ? should_fail+0x142/0x7b0 [ 743.313894] ? fs_reclaim_release+0xd0/0x110 [ 743.318314] ? setup_fault_attr+0x200/0x200 [ 743.322646] ? lock_acquire+0x170/0x3c0 23:51:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xfffffdef, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 743.326639] ? check_preemption_disabled+0x41/0x280 [ 743.331673] ? __kmalloc_node+0x38/0x70 [ 743.335663] alloc_pages_current+0x193/0x2a0 [ 743.340082] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 743.345372] push_pipe+0x3e3/0x770 [ 743.348932] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 743.353879] ? kernel_text_address+0xbd/0xf0 [ 743.355605] kauditd_printk_skb: 53 callbacks suppressed [ 743.355619] audit: type=1804 audit(1674604317.112:3260): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/592/file0" dev="sda1" ino=15012 res=1 [ 743.358298] ? iov_iter_bvec+0x130/0x130 [ 743.358320] ? lock_downgrade+0x720/0x720 [ 743.358330] ? iov_iter_pipe+0xb4/0x2c0 [ 743.358346] default_file_splice_read+0x191/0xa00 [ 743.404828] ? alloc_pipe_info+0x193/0x470 [ 743.409085] ? do_splice_direct+0x270/0x270 [ 743.413413] ? do_syscall_64+0xf9/0x620 [ 743.417396] ? aa_path_link+0x410/0x410 [ 743.421386] ? perf_trace_lock_acquire+0x530/0x530 23:51:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb64, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 743.426323] ? perf_trace_lock+0xe2/0x4b0 [ 743.430486] ? perf_trace_lock_acquire+0x530/0x530 [ 743.435428] ? perf_trace_lock_acquire+0x530/0x530 [ 743.440370] ? fsnotify+0x84e/0xe10 [ 743.444009] ? fsnotify_first_mark+0x200/0x200 [ 743.448605] ? lock_acquire+0x170/0x3c0 [ 743.452586] ? check_preemption_disabled+0x41/0x280 [ 743.457617] ? security_file_permission+0x1c0/0x220 [ 743.462657] ? do_splice_direct+0x270/0x270 [ 743.466991] do_splice_to+0x10e/0x160 [ 743.470807] splice_direct_to_actor+0x2b9/0x8d0 23:51:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 743.475496] ? generic_pipe_buf_nosteal+0x10/0x10 [ 743.480351] ? do_splice_to+0x160/0x160 [ 743.484344] do_splice_direct+0x1a7/0x270 [ 743.488506] ? splice_direct_to_actor+0x8d0/0x8d0 [ 743.493365] ? security_file_permission+0x1c0/0x220 [ 743.498403] do_sendfile+0x550/0xc30 [ 743.502136] ? do_compat_pwritev64+0x1b0/0x1b0 [ 743.506730] ? vfs_write+0x393/0x540 [ 743.510461] __se_sys_sendfile64+0x147/0x160 [ 743.514877] ? __se_sys_sendfile+0x180/0x180 [ 743.519297] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 743.524685] ? trace_hardirqs_off_caller+0x6e/0x210 [ 743.529724] ? do_syscall_64+0x21/0x620 [ 743.533712] do_syscall_64+0xf9/0x620 [ 743.537516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 743.542697] RIP: 0033:0x7fc948a630c9 [ 743.546395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 743.565304] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.573012] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 743.580290] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 743.587556] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.594824] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 743.602093] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:57 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 16) 23:51:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010b6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090031006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:57 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000180000000000", @ANYRES32=r0, @ANYBLOB="eb4e0000000000002e2f66696c653000"]) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/radio_mr800', 0x1012c0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x38, 0x48, 0x100, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, 0x0, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x8880) r6 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x10}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8100}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1f9ee}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0x2}}]}}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1d, 0x2, 0xf9, 0x80000000, 0x980, r1, 0x400, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x48) (async) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0xcadd, 0xa, 0x4, 0x800, 0x5, {}, {0x5, 0x8, 0x81, 0x4, 0x8, 0x1, "e900e45c"}, 0x6, 0x3, {&(0x7f0000000080)=[{0x0, 0x1ede2078, {0x8}}, {0x54896a3e, 0x8, {0x2}, 0x6}]}, 0x1ef, 0x0, r8}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc1}) 23:51:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090060006373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010c6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:57 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000180000000000", @ANYRES32=r0, @ANYBLOB="eb4e0000000000002e2f66696c653000"]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/radio_mr800', 0x1012c0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x38, 0x48, 0x100, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, 0x0, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x8880) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x10}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8100}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1f9ee}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0x2}}]}}]}, 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1d, 0x2, 0xf9, 0x80000000, 0x980, r1, 0x400, '\x00', r7, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x48) (async) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0xcadd, 0xa, 0x4, 0x800, 0x5, {}, {0x5, 0x8, 0x81, 0x4, 0x8, 0x1, "e900e45c"}, 0x6, 0x3, {&(0x7f0000000080)=[{0x0, 0x1ede2078, {0x8}}, {0x54896a3e, 0x8, {0x2}, 0x6}]}, 0x1ef, 0x0, r8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async, rerun: 32) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (rerun: 32) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc1}) 23:51:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000036373756d00000000200002801c0001"], 0x64}}, 0x0) [ 744.171994] FAULT_INJECTION: forcing a failure. [ 744.171994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 744.184444] audit: type=1804 audit(1674604317.942:3261): pid=17423 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/593/file0" dev="sda1" ino=14992 res=1 [ 744.266899] CPU: 1 PID: 17424 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 744.274857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 744.284221] Call Trace: [ 744.286835] dump_stack+0x1fc/0x2ef [ 744.290482] should_fail.cold+0xa/0xf [ 744.294303] ? lock_acquire+0x170/0x3c0 [ 744.298291] ? setup_fault_attr+0x200/0x200 [ 744.302657] __alloc_pages_nodemask+0x239/0x2890 [ 744.307425] ? kasan_kmalloc+0x139/0x160 [ 744.311500] ? __kmalloc_node+0x4c/0x70 [ 744.315496] ? kvmalloc_node+0x61/0xf0 [ 744.319390] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 744.324501] ? default_file_splice_read+0x191/0xa00 [ 744.329532] ? do_splice_to+0x10e/0x160 [ 744.333524] ? do_sendfile+0x550/0xc30 [ 744.337435] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 744.342289] ? get_reg+0x1f0/0x1f0 [ 744.345844] ? check_preemption_disabled+0x41/0x280 [ 744.350880] ? should_fail+0x142/0x7b0 [ 744.354782] ? fs_reclaim_release+0xd0/0x110 [ 744.359207] ? setup_fault_attr+0x200/0x200 [ 744.363539] ? lock_acquire+0x170/0x3c0 [ 744.367529] ? check_preemption_disabled+0x41/0x280 [ 744.372558] ? __kmalloc_node+0x38/0x70 [ 744.376551] alloc_pages_current+0x193/0x2a0 [ 744.380975] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 744.386278] push_pipe+0x3e3/0x770 [ 744.389836] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 744.394783] ? kernel_text_address+0xbd/0xf0 [ 744.399190] ? iov_iter_bvec+0x130/0x130 [ 744.403261] ? lock_downgrade+0x720/0x720 [ 744.407404] ? iov_iter_pipe+0xb4/0x2c0 [ 744.411385] default_file_splice_read+0x191/0xa00 [ 744.416222] ? alloc_pipe_info+0x193/0x470 [ 744.420474] ? do_splice_direct+0x270/0x270 [ 744.424789] ? do_syscall_64+0xf9/0x620 [ 744.428752] ? aa_path_link+0x410/0x410 [ 744.432722] ? perf_trace_lock_acquire+0x530/0x530 [ 744.437646] ? perf_trace_lock+0xe2/0x4b0 [ 744.441792] ? perf_trace_lock_acquire+0x530/0x530 [ 744.446708] ? perf_trace_lock_acquire+0x530/0x530 [ 744.451649] ? fsnotify+0x84e/0xe10 [ 744.455290] ? fsnotify_first_mark+0x200/0x200 [ 744.459894] ? lock_acquire+0x170/0x3c0 [ 744.463886] ? check_preemption_disabled+0x41/0x280 [ 744.468901] ? security_file_permission+0x1c0/0x220 [ 744.473926] ? do_splice_direct+0x270/0x270 [ 744.478241] do_splice_to+0x10e/0x160 [ 744.482067] splice_direct_to_actor+0x2b9/0x8d0 [ 744.486729] ? generic_pipe_buf_nosteal+0x10/0x10 [ 744.491563] ? do_splice_to+0x160/0x160 [ 744.495526] do_splice_direct+0x1a7/0x270 [ 744.499663] ? splice_direct_to_actor+0x8d0/0x8d0 [ 744.504494] ? security_file_permission+0x1c0/0x220 [ 744.509519] do_sendfile+0x550/0xc30 [ 744.513225] ? do_compat_pwritev64+0x1b0/0x1b0 [ 744.517810] ? vfs_write+0x393/0x540 [ 744.521527] __se_sys_sendfile64+0x147/0x160 [ 744.525931] ? __se_sys_sendfile+0x180/0x180 [ 744.530326] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 744.535709] ? trace_hardirqs_off_caller+0x6e/0x210 [ 744.540719] ? do_syscall_64+0x21/0x620 [ 744.544691] do_syscall_64+0xf9/0x620 [ 744.548495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 744.553711] RIP: 0033:0x7fc948a630c9 [ 744.557408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 744.576295] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 744.583989] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 744.591244] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 744.598498] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.605753] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 744.613005] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 [ 744.641134] audit: type=1804 audit(1674604318.402:3262): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/594/file0" dev="sda1" ino=14964 res=1 23:51:58 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 17) 23:51:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x850a0000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010e6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000996373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0x2}) 23:51:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009a6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0x2}) 23:51:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010f6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 745.116666] FAULT_INJECTION: forcing a failure. [ 745.116666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.178854] CPU: 1 PID: 17465 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 745.186782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 745.196146] Call Trace: [ 745.198753] dump_stack+0x1fc/0x2ef [ 745.202403] should_fail.cold+0xa/0xf [ 745.206218] ? lock_acquire+0x170/0x3c0 [ 745.210218] ? setup_fault_attr+0x200/0x200 [ 745.214565] __alloc_pages_nodemask+0x239/0x2890 [ 745.219337] ? kasan_kmalloc+0x139/0x160 [ 745.223418] ? __kmalloc_node+0x4c/0x70 23:51:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 745.227411] ? kvmalloc_node+0x61/0xf0 [ 745.231310] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 745.236423] ? default_file_splice_read+0x191/0xa00 [ 745.241455] ? do_splice_to+0x10e/0x160 [ 745.245462] ? do_sendfile+0x550/0xc30 [ 745.249376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 745.254226] ? get_reg+0x1f0/0x1f0 [ 745.257780] ? check_preemption_disabled+0x41/0x280 [ 745.262816] ? should_fail+0x142/0x7b0 [ 745.266714] ? fs_reclaim_release+0xd0/0x110 [ 745.271151] ? setup_fault_attr+0x200/0x200 [ 745.275486] ? lock_acquire+0x170/0x3c0 [ 745.279479] ? check_preemption_disabled+0x41/0x280 [ 745.284506] ? __kmalloc_node+0x38/0x70 [ 745.288495] alloc_pages_current+0x193/0x2a0 [ 745.292910] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 745.298200] push_pipe+0x3e3/0x770 [ 745.301759] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 745.306704] ? kernel_text_address+0xbd/0xf0 [ 745.311130] ? iov_iter_bvec+0x130/0x130 [ 745.315206] ? lock_downgrade+0x720/0x720 [ 745.319364] ? iov_iter_pipe+0xb4/0x2c0 [ 745.323357] default_file_splice_read+0x191/0xa00 [ 745.328221] ? alloc_pipe_info+0x193/0x470 [ 745.332470] ? do_splice_direct+0x270/0x270 [ 745.336803] ? do_syscall_64+0xf9/0x620 [ 745.340788] ? aa_path_link+0x410/0x410 [ 745.344783] ? perf_trace_lock_acquire+0x530/0x530 [ 745.349726] ? perf_trace_lock+0xe2/0x4b0 [ 745.353881] ? perf_trace_lock_acquire+0x530/0x530 [ 745.358818] ? perf_trace_lock_acquire+0x530/0x530 [ 745.363760] ? fsnotify+0x84e/0xe10 [ 745.367400] ? fsnotify_first_mark+0x200/0x200 [ 745.371995] ? lock_acquire+0x170/0x3c0 [ 745.375986] ? check_preemption_disabled+0x41/0x280 [ 745.381019] ? security_file_permission+0x1c0/0x220 [ 745.386053] ? do_splice_direct+0x270/0x270 [ 745.390395] do_splice_to+0x10e/0x160 [ 745.394222] splice_direct_to_actor+0x2b9/0x8d0 [ 745.398907] ? generic_pipe_buf_nosteal+0x10/0x10 [ 745.403752] ? do_splice_to+0x160/0x160 [ 745.407740] do_splice_direct+0x1a7/0x270 [ 745.411902] ? splice_direct_to_actor+0x8d0/0x8d0 [ 745.416755] ? security_file_permission+0x1c0/0x220 [ 745.421784] do_sendfile+0x550/0xc30 [ 745.425502] ? do_compat_pwritev64+0x1b0/0x1b0 [ 745.430086] ? vfs_write+0x393/0x540 [ 745.433797] __se_sys_sendfile64+0x147/0x160 [ 745.438189] ? __se_sys_sendfile+0x180/0x180 [ 745.442585] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 745.447956] ? trace_hardirqs_off_caller+0x6e/0x210 [ 745.452955] ? do_syscall_64+0x21/0x620 [ 745.456930] do_syscall_64+0xf9/0x620 [ 745.460735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 745.465925] RIP: 0033:0x7fc948a630c9 [ 745.469651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.488555] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 745.496258] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 745.503509] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 745.510769] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.518032] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 745.525287] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:51:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 18) 23:51:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:59 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001, 0x2}) 23:51:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009b6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001106373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:51:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001486373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009c6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:51:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x60, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:51:59 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0xa) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x89b, 0x0, 0x4}, {0x809, 0x0, 0x4}, {0x345}, {0x848, 0x0, 0x2000000000000}]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x1b}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000140)={{r3}, "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"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 746.087617] FAULT_INJECTION: forcing a failure. [ 746.087617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:51:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfcffffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 746.135717] CPU: 0 PID: 17507 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 746.143645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 746.153011] Call Trace: [ 746.155614] dump_stack+0x1fc/0x2ef [ 746.159260] should_fail.cold+0xa/0xf [ 746.163080] ? lock_acquire+0x170/0x3c0 [ 746.167071] ? setup_fault_attr+0x200/0x200 [ 746.171419] __alloc_pages_nodemask+0x239/0x2890 [ 746.176194] ? kasan_kmalloc+0x139/0x160 [ 746.180276] ? __kmalloc_node+0x4c/0x70 [ 746.184264] ? kvmalloc_node+0x61/0xf0 [ 746.188161] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 746.193269] ? default_file_splice_read+0x191/0xa00 [ 746.198290] ? do_splice_to+0x10e/0x160 [ 746.202310] ? do_sendfile+0x550/0xc30 [ 746.206224] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.211126] ? get_reg+0x1f0/0x1f0 [ 746.214676] ? check_preemption_disabled+0x41/0x280 [ 746.219710] ? should_fail+0x142/0x7b0 [ 746.223607] ? fs_reclaim_release+0xd0/0x110 [ 746.228028] ? setup_fault_attr+0x200/0x200 [ 746.232366] ? lock_acquire+0x170/0x3c0 [ 746.236366] ? check_preemption_disabled+0x41/0x280 [ 746.241395] ? __kmalloc_node+0x38/0x70 [ 746.245388] alloc_pages_current+0x193/0x2a0 [ 746.249805] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 746.255112] push_pipe+0x3e3/0x770 [ 746.258671] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 746.263617] ? kernel_text_address+0xbd/0xf0 [ 746.268037] ? iov_iter_bvec+0x130/0x130 [ 746.272114] ? lock_downgrade+0x720/0x720 [ 746.276269] ? iov_iter_pipe+0xb4/0x2c0 [ 746.280255] default_file_splice_read+0x191/0xa00 [ 746.285115] ? alloc_pipe_info+0x193/0x470 [ 746.289363] ? do_splice_direct+0x270/0x270 [ 746.293698] ? do_syscall_64+0xf9/0x620 [ 746.297680] ? aa_path_link+0x410/0x410 [ 746.301669] ? perf_trace_lock_acquire+0x530/0x530 [ 746.306604] ? perf_trace_lock+0xe2/0x4b0 [ 746.310774] ? perf_trace_lock_acquire+0x530/0x530 [ 746.315713] ? perf_trace_lock_acquire+0x530/0x530 [ 746.320661] ? fsnotify+0x84e/0xe10 [ 746.324305] ? fsnotify_first_mark+0x200/0x200 [ 746.328906] ? lock_acquire+0x170/0x3c0 [ 746.332898] ? check_preemption_disabled+0x41/0x280 [ 746.337934] ? security_file_permission+0x1c0/0x220 [ 746.342965] ? do_splice_direct+0x270/0x270 [ 746.347316] do_splice_to+0x10e/0x160 [ 746.351147] splice_direct_to_actor+0x2b9/0x8d0 [ 746.355833] ? generic_pipe_buf_nosteal+0x10/0x10 [ 746.360691] ? do_splice_to+0x160/0x160 [ 746.364689] do_splice_direct+0x1a7/0x270 [ 746.368852] ? splice_direct_to_actor+0x8d0/0x8d0 [ 746.373724] ? security_file_permission+0x1c0/0x220 [ 746.378765] do_sendfile+0x550/0xc30 [ 746.382500] ? do_compat_pwritev64+0x1b0/0x1b0 [ 746.387101] ? vfs_write+0x393/0x540 [ 746.390833] __se_sys_sendfile64+0x147/0x160 [ 746.395260] ? __se_sys_sendfile+0x180/0x180 [ 746.399681] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 746.405082] ? trace_hardirqs_off_caller+0x6e/0x210 [ 746.410100] ? do_syscall_64+0x21/0x620 [ 746.414074] do_syscall_64+0xf9/0x620 [ 746.417866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 746.423039] RIP: 0033:0x7fc948a630c9 [ 746.426735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 746.445624] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 746.453325] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 746.460587] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 746.467858] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.475138] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 746.482401] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 19) 23:52:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900014c6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:00 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0xa) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x89b, 0x0, 0x4}, {0x809, 0x0, 0x4}, {0x345}, {0x848, 0x0, 0x2000000000000}]}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x1b}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000140)={{r3}, "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"}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009d6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001606373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009e6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 746.980463] FAULT_INJECTION: forcing a failure. [ 746.980463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:00 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0xa) fcntl$setlease(r0, 0x400, 0x0) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x2) (rerun: 32) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x89b, 0x0, 0x4}, {0x809, 0x0, 0x4}, {0x345}, {0x848, 0x0, 0x2000000000000}]}) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x1b}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000140)={{r3}, "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"}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 747.057111] CPU: 1 PID: 17536 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 747.065034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 747.074398] Call Trace: [ 747.077005] dump_stack+0x1fc/0x2ef [ 747.080661] should_fail.cold+0xa/0xf [ 747.084479] ? lock_acquire+0x170/0x3c0 [ 747.088473] ? setup_fault_attr+0x200/0x200 [ 747.092826] __alloc_pages_nodemask+0x239/0x2890 [ 747.097601] ? kasan_kmalloc+0x139/0x160 [ 747.101687] ? __kmalloc_node+0x4c/0x70 [ 747.105687] ? kvmalloc_node+0x61/0xf0 [ 747.109589] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 747.114699] ? default_file_splice_read+0x191/0xa00 [ 747.119728] ? do_splice_to+0x10e/0x160 [ 747.123717] ? do_sendfile+0x550/0xc30 [ 747.127642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 747.132516] ? get_reg+0x1f0/0x1f0 [ 747.136073] ? check_preemption_disabled+0x41/0x280 [ 747.141111] ? should_fail+0x142/0x7b0 [ 747.145009] ? fs_reclaim_release+0xd0/0x110 [ 747.149441] ? setup_fault_attr+0x200/0x200 [ 747.153781] ? lock_acquire+0x170/0x3c0 [ 747.157772] ? check_preemption_disabled+0x41/0x280 [ 747.162804] ? __kmalloc_node+0x38/0x70 [ 747.166804] alloc_pages_current+0x193/0x2a0 [ 747.171264] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 747.176552] push_pipe+0x3e3/0x770 [ 747.180109] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 747.185053] ? kernel_text_address+0xbd/0xf0 [ 747.189470] ? iov_iter_bvec+0x130/0x130 [ 747.193562] ? lock_downgrade+0x720/0x720 [ 747.197714] ? iov_iter_pipe+0xb4/0x2c0 [ 747.201699] default_file_splice_read+0x191/0xa00 [ 747.206557] ? alloc_pipe_info+0x193/0x470 [ 747.210809] ? do_splice_direct+0x270/0x270 [ 747.215144] ? do_syscall_64+0xf9/0x620 [ 747.219128] ? aa_path_link+0x410/0x410 [ 747.223127] ? perf_trace_lock_acquire+0x530/0x530 [ 747.228075] ? perf_trace_lock+0xe2/0x4b0 [ 747.232244] ? perf_trace_lock_acquire+0x530/0x530 [ 747.237201] ? perf_trace_lock_acquire+0x530/0x530 [ 747.242145] ? fsnotify+0x84e/0xe10 [ 747.245790] ? fsnotify_first_mark+0x200/0x200 [ 747.250389] ? lock_acquire+0x170/0x3c0 23:52:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900009f6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 747.254375] ? check_preemption_disabled+0x41/0x280 [ 747.259404] ? security_file_permission+0x1c0/0x220 [ 747.264414] ? do_splice_direct+0x270/0x270 [ 747.268726] do_splice_to+0x10e/0x160 [ 747.272517] splice_direct_to_actor+0x2b9/0x8d0 [ 747.277171] ? generic_pipe_buf_nosteal+0x10/0x10 [ 747.282018] ? do_splice_to+0x160/0x160 [ 747.285983] do_splice_direct+0x1a7/0x270 [ 747.290151] ? splice_direct_to_actor+0x8d0/0x8d0 [ 747.295013] ? security_file_permission+0x1c0/0x220 [ 747.300061] do_sendfile+0x550/0xc30 [ 747.303764] ? do_compat_pwritev64+0x1b0/0x1b0 [ 747.308357] ? vfs_write+0x393/0x540 [ 747.312065] __se_sys_sendfile64+0x147/0x160 [ 747.316491] ? __se_sys_sendfile+0x180/0x180 [ 747.320891] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 747.326243] ? trace_hardirqs_off_caller+0x6e/0x210 [ 747.331276] ? do_syscall_64+0x21/0x620 [ 747.335250] do_syscall_64+0xf9/0x620 [ 747.339037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 747.344242] RIP: 0033:0x7fc948a630c9 [ 747.347936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.366820] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 747.374525] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 747.381779] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 747.389031] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.396284] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 747.403539] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 20) 23:52:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a06373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001686373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x3, 0x1, @stop_pts=0xff}) 23:52:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xeac, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 747.875714] nla_parse: 29 callbacks suppressed [ 747.875725] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 747.886657] FAULT_INJECTION: forcing a failure. [ 747.886657] name failslab, interval 1, probability 0, space 0, times 0 23:52:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x3, 0x1, @stop_pts=0xff}) [ 747.924554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.934927] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 747.945486] CPU: 1 PID: 17581 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 747.953398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 747.962763] Call Trace: [ 747.965366] dump_stack+0x1fc/0x2ef [ 747.969016] should_fail.cold+0xa/0xf 23:52:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a16373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900016c6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 747.972835] ? setup_fault_attr+0x200/0x200 [ 747.977170] ? lock_acquire+0x170/0x3c0 [ 747.981177] __should_failslab+0x115/0x180 [ 747.985430] should_failslab+0x5/0x10 [ 747.989245] __kmalloc+0x2ab/0x3c0 [ 747.992802] ? rw_copy_check_uvector+0x2ca/0x340 [ 747.997577] rw_copy_check_uvector+0x2ca/0x340 [ 748.002182] ? check_preemption_disabled+0x41/0x280 [ 748.007221] import_iovec+0xa6/0x3a0 [ 748.010946] ? dup_iter+0x250/0x250 [ 748.014584] ? check_preemption_disabled+0x41/0x280 [ 748.019613] ? __kmalloc_node+0x38/0x70 [ 748.023608] vfs_readv+0xbb/0x150 [ 748.027072] ? compat_rw_copy_check_uvector+0x410/0x410 [ 748.032547] ? push_pipe+0x3fe/0x770 [ 748.036282] ? iov_iter_get_pages_alloc+0x339/0x1150 [ 748.041408] ? iov_iter_bvec+0x130/0x130 [ 748.045490] ? lock_downgrade+0x720/0x720 [ 748.049669] ? iov_iter_pipe+0xb4/0x2c0 [ 748.053692] default_file_splice_read+0x457/0xa00 [ 748.058560] ? alloc_pipe_info+0x193/0x470 [ 748.062812] ? do_splice_direct+0x270/0x270 [ 748.067145] ? do_syscall_64+0xf9/0x620 [ 748.067540] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 748.071122] ? aa_path_link+0x410/0x410 [ 748.071141] ? perf_trace_lock_acquire+0x530/0x530 [ 748.071155] ? perf_trace_lock+0xe2/0x4b0 [ 748.071176] ? perf_trace_lock_acquire+0x530/0x530 [ 748.071220] ? security_file_permission+0x1c0/0x220 [ 748.102769] ? do_splice_direct+0x270/0x270 [ 748.107115] do_splice_to+0x10e/0x160 [ 748.109775] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.110926] splice_direct_to_actor+0x2b9/0x8d0 23:52:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 748.110950] ? generic_pipe_buf_nosteal+0x10/0x10 [ 748.110975] ? do_splice_to+0x160/0x160 [ 748.133027] do_splice_direct+0x1a7/0x270 [ 748.137197] ? splice_direct_to_actor+0x8d0/0x8d0 [ 748.142088] ? security_file_permission+0x1c0/0x220 [ 748.147127] do_sendfile+0x550/0xc30 [ 748.150600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 748.150859] ? do_compat_pwritev64+0x1b0/0x1b0 [ 748.150880] ? vfs_write+0x393/0x540 [ 748.150902] __se_sys_sendfile64+0x147/0x160 [ 748.172155] ? __se_sys_sendfile+0x180/0x180 [ 748.176580] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 748.181978] ? trace_hardirqs_off_caller+0x6e/0x210 [ 748.187007] ? do_syscall_64+0x21/0x620 [ 748.190997] do_syscall_64+0xf9/0x620 [ 748.194824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 748.200023] RIP: 0033:0x7fc948a630c9 [ 748.203743] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.222659] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 748.230379] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 748.237663] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 748.244172] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 748.244953] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.244963] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 748.244970] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:02 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 21) 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a26373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001746373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xec0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x3, 0x1, @stop_pts=0xff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x3, 0x1, @stop_pts=0xff}) (async) 23:52:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xfffffffc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 748.376113] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.394392] FAULT_INJECTION: forcing a failure. [ 748.394392] name failslab, interval 1, probability 0, space 0, times 0 [ 748.403374] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090000a36373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900017a6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 748.436954] CPU: 1 PID: 17616 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 748.444879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 748.454240] Call Trace: [ 748.456844] dump_stack+0x1fc/0x2ef [ 748.460489] should_fail.cold+0xa/0xf [ 748.464306] ? setup_fault_attr+0x200/0x200 [ 748.468645] ? lock_acquire+0x170/0x3c0 [ 748.472642] __should_failslab+0x115/0x180 [ 748.476891] should_failslab+0x5/0x10 [ 748.480703] kmem_cache_alloc_node_trace+0x244/0x3b0 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001000a73756d00000000200002801c0001"], 0x64}}, 0x0) [ 748.485821] __kmalloc_node+0x38/0x70 [ 748.489663] kvmalloc_node+0x61/0xf0 [ 748.492702] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.493381] seq_read+0x85c/0x11c0 [ 748.505491] ? fsnotify+0x84e/0xe10 [ 748.509133] ? fsnotify_first_mark+0x200/0x200 [ 748.513731] ? seq_hex_dump+0x450/0x450 [ 748.517717] proc_reg_read+0x1bd/0x2d0 [ 748.521631] ? proc_reg_unlocked_ioctl+0x2c0/0x2c0 [ 748.526583] do_iter_read+0x471/0x630 [ 748.530410] vfs_readv+0xe5/0x150 [ 748.533875] ? compat_rw_copy_check_uvector+0x410/0x410 [ 748.539248] ? push_pipe+0x3fe/0x770 [ 748.542979] ? iov_iter_get_pages_alloc+0x339/0x1150 [ 748.548098] ? iov_iter_bvec+0x130/0x130 [ 748.552175] ? lock_downgrade+0x720/0x720 [ 748.556331] ? iov_iter_pipe+0xb4/0x2c0 [ 748.560321] default_file_splice_read+0x457/0xa00 [ 748.565182] ? alloc_pipe_info+0x193/0x470 [ 748.569428] ? do_splice_direct+0x270/0x270 [ 748.573768] ? do_syscall_64+0xf9/0x620 [ 748.577754] ? aa_path_link+0x410/0x410 [ 748.581746] ? perf_trace_lock_acquire+0x530/0x530 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001002573756d00000000200002801c0001"], 0x64}}, 0x0) [ 748.586683] ? perf_trace_lock+0xe2/0x4b0 [ 748.590855] ? perf_trace_lock_acquire+0x530/0x530 [ 748.595798] ? perf_trace_lock_acquire+0x530/0x530 [ 748.600771] ? security_file_permission+0x1c0/0x220 [ 748.605812] ? do_splice_direct+0x270/0x270 [ 748.610152] do_splice_to+0x10e/0x160 [ 748.613967] splice_direct_to_actor+0x2b9/0x8d0 [ 748.618660] ? generic_pipe_buf_nosteal+0x10/0x10 [ 748.623519] ? do_splice_to+0x160/0x160 [ 748.627517] do_splice_direct+0x1a7/0x270 [ 748.631682] ? splice_direct_to_actor+0x8d0/0x8d0 [ 748.636544] ? security_file_permission+0x1c0/0x220 [ 748.641578] do_sendfile+0x550/0xc30 [ 748.645318] ? do_compat_pwritev64+0x1b0/0x1b0 [ 748.649918] ? vfs_write+0x393/0x540 [ 748.653661] __se_sys_sendfile64+0x147/0x160 [ 748.658083] ? __se_sys_sendfile+0x180/0x180 [ 748.662508] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 748.667882] ? trace_hardirqs_off_caller+0x6e/0x210 [ 748.672913] ? do_syscall_64+0x21/0x620 [ 748.676898] do_syscall_64+0xf9/0x620 [ 748.680714] entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001026373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001036373756d00000000200002801c0001"], 0x64}}, 0x0) [ 748.685911] RIP: 0033:0x7fc948a630c9 [ 748.689648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.708556] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 748.716277] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 748.723558] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 748.730839] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 23:52:02 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 22) 23:52:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:02 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7}) 23:52:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001000a73756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001046373756d00000000200002801c0001"], 0x64}}, 0x0) [ 748.738117] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 748.745397] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 [ 748.769508] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.775138] ieee802154 phy1 wpan1: encryption failed: -22 23:52:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 748.887265] FAULT_INJECTION: forcing a failure. [ 748.887265] name failslab, interval 1, probability 0, space 0, times 0 23:52:02 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7}) 23:52:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001056373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f0000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 748.973835] CPU: 1 PID: 17656 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 748.981760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 748.991124] Call Trace: [ 748.993729] dump_stack+0x1fc/0x2ef [ 748.997373] should_fail.cold+0xa/0xf [ 749.001185] ? setup_fault_attr+0x200/0x200 [ 749.005517] ? lock_acquire+0x170/0x3c0 [ 749.009506] __should_failslab+0x115/0x180 [ 749.013755] should_failslab+0x5/0x10 [ 749.017568] __kmalloc+0x2ab/0x3c0 23:52:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 749.021112] ? tty_write+0x59e/0x810 [ 749.024833] ? tty_write+0x24e/0x810 [ 749.028558] tty_write+0x59e/0x810 [ 749.032112] ? check_preemption_disabled+0x41/0x280 [ 749.037133] ? n_tty_open+0x160/0x160 [ 749.040952] __vfs_write+0xf7/0x770 [ 749.044590] ? tty_compat_ioctl+0x270/0x270 [ 749.048924] ? kernel_read+0x110/0x110 [ 749.052824] ? generic_pipe_buf_release+0x1cc/0x240 [ 749.057845] ? iov_iter_advance+0x7d5/0xdb0 [ 749.062179] ? default_file_splice_read+0x814/0xa00 [ 749.067208] __kernel_write+0x109/0x370 [ 749.071190] write_pipe_buf+0x153/0x1f0 [ 749.075175] ? default_file_splice_read+0xa00/0xa00 [ 749.080206] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 749.085588] __splice_from_pipe+0x389/0x800 [ 749.089923] ? default_file_splice_read+0xa00/0xa00 [ 749.094952] default_file_splice_write+0xd8/0x180 [ 749.099805] ? generic_splice_sendpage+0x140/0x140 [ 749.104752] ? security_file_permission+0x1c0/0x220 [ 749.109779] ? generic_splice_sendpage+0x140/0x140 [ 749.114724] direct_splice_actor+0x115/0x160 [ 749.119147] splice_direct_to_actor+0x33f/0x8d0 23:52:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="130000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 749.123827] ? generic_pipe_buf_nosteal+0x10/0x10 [ 749.128690] ? do_splice_to+0x160/0x160 [ 749.132689] do_splice_direct+0x1a7/0x270 [ 749.136845] ? splice_direct_to_actor+0x8d0/0x8d0 [ 749.141699] ? security_file_permission+0x1c0/0x220 [ 749.146730] do_sendfile+0x550/0xc30 [ 749.150461] ? do_compat_pwritev64+0x1b0/0x1b0 [ 749.155050] ? vfs_write+0x393/0x540 [ 749.158773] __se_sys_sendfile64+0x147/0x160 [ 749.163189] ? __se_sys_sendfile+0x180/0x180 [ 749.167607] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 749.172982] ? trace_hardirqs_off_caller+0x6e/0x210 [ 749.178013] ? do_syscall_64+0x21/0x620 [ 749.182014] do_syscall_64+0xf9/0x620 [ 749.185868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 749.191063] RIP: 0033:0x7fc948a630c9 [ 749.194788] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.213699] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.221424] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 749.228707] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 749.235982] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.243260] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 749.250544] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 23) 23:52:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001066373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001002573756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x7}) (async) 23:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xac0e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00e00003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001076373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) 23:52:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100630a756d00000000200002801c0001"], 0x64}}, 0x0) [ 749.415929] FAULT_INJECTION: forcing a failure. [ 749.415929] name failslab, interval 1, probability 0, space 0, times 0 [ 749.463145] CPU: 0 PID: 17697 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 749.471070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 749.480430] Call Trace: [ 749.483031] dump_stack+0x1fc/0x2ef [ 749.486682] should_fail.cold+0xa/0xf [ 749.490498] ? setup_fault_attr+0x200/0x200 [ 749.494840] ? lock_acquire+0x170/0x3c0 [ 749.498836] __should_failslab+0x115/0x180 [ 749.503087] should_failslab+0x5/0x10 [ 749.506895] __kmalloc+0x2ab/0x3c0 [ 749.510456] ? tty_write+0x59e/0x810 [ 749.514198] ? tty_write+0x24e/0x810 [ 749.517937] tty_write+0x59e/0x810 [ 749.521493] ? check_preemption_disabled+0x41/0x280 [ 749.526542] ? n_tty_open+0x160/0x160 [ 749.530363] __vfs_write+0xf7/0x770 [ 749.534002] ? tty_compat_ioctl+0x270/0x270 [ 749.538337] ? kernel_read+0x110/0x110 [ 749.542236] ? generic_pipe_buf_release+0x1cc/0x240 [ 749.547272] ? iov_iter_advance+0x7d5/0xdb0 [ 749.551619] ? default_file_splice_read+0x814/0xa00 [ 749.556659] __kernel_write+0x109/0x370 23:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xc00e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 749.560657] write_pipe_buf+0x153/0x1f0 [ 749.564647] ? default_file_splice_read+0xa00/0xa00 [ 749.569674] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 749.575056] __splice_from_pipe+0x389/0x800 [ 749.579398] ? default_file_splice_read+0xa00/0xa00 [ 749.584441] default_file_splice_write+0xd8/0x180 [ 749.589299] ? generic_splice_sendpage+0x140/0x140 [ 749.594246] ? security_file_permission+0x1c0/0x220 [ 749.599297] ? generic_splice_sendpage+0x140/0x140 [ 749.604244] direct_splice_actor+0x115/0x160 [ 749.608667] splice_direct_to_actor+0x33f/0x8d0 23:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 749.613361] ? generic_pipe_buf_nosteal+0x10/0x10 [ 749.618218] ? do_splice_to+0x160/0x160 [ 749.622228] do_splice_direct+0x1a7/0x270 [ 749.626390] ? splice_direct_to_actor+0x8d0/0x8d0 [ 749.631254] ? security_file_permission+0x1c0/0x220 [ 749.636290] do_sendfile+0x550/0xc30 [ 749.640022] ? do_compat_pwritev64+0x1b0/0x1b0 [ 749.644621] ? vfs_write+0x393/0x540 [ 749.648354] __se_sys_sendfile64+0x147/0x160 [ 749.652784] ? __se_sys_sendfile+0x180/0x180 [ 749.657209] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 749.662591] ? trace_hardirqs_off_caller+0x6e/0x210 [ 749.667624] ? do_syscall_64+0x21/0x620 [ 749.671609] do_syscall_64+0xf9/0x620 [ 749.675423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 749.680620] RIP: 0033:0x7fc948a630c9 [ 749.684340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.703252] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.710982] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 749.718261] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 749.725538] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.732818] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 749.740094] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 24) 23:52:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) 23:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e03f03003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001086373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006323756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001096373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006325756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640100203100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) [ 749.927801] FAULT_INJECTION: forcing a failure. [ 749.927801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.987875] CPU: 0 PID: 17733 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 749.995785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 750.005146] Call Trace: [ 750.007756] dump_stack+0x1fc/0x2ef [ 750.011407] should_fail.cold+0xa/0xf [ 750.015230] ? lock_acquire+0x170/0x3c0 [ 750.019225] ? setup_fault_attr+0x200/0x200 [ 750.023594] __alloc_pages_nodemask+0x239/0x2890 [ 750.028422] ? kasan_kmalloc+0x139/0x160 [ 750.032504] ? __kmalloc_node+0x4c/0x70 23:52:03 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x40e041) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, {0x3, 0x7fffffff, 0x4, 0x10000}}) [ 750.036489] ? kvmalloc_node+0x61/0xf0 [ 750.040388] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 750.045502] ? default_file_splice_read+0x191/0xa00 [ 750.050533] ? do_splice_to+0x10e/0x160 [ 750.054543] ? do_sendfile+0x550/0xc30 [ 750.058457] ? __se_sys_sendfile64+0x147/0x160 [ 750.063047] ? do_syscall_64+0xf9/0x620 [ 750.067037] ? perf_trace_lock+0xe2/0x4b0 [ 750.071204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 750.076062] ? perf_trace_lock_acquire+0x530/0x530 [ 750.081008] ? mark_held_locks+0xa6/0xf0 [ 750.085084] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 750.090217] ? should_fail+0x142/0x7b0 [ 750.094118] ? fs_reclaim_release+0xd0/0x110 [ 750.098541] ? setup_fault_attr+0x200/0x200 [ 750.102882] ? lock_acquire+0x170/0x3c0 [ 750.106873] ? check_preemption_disabled+0x41/0x280 [ 750.111903] ? __kmalloc_node+0x38/0x70 [ 750.115896] alloc_pages_current+0x193/0x2a0 [ 750.120314] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 750.125604] push_pipe+0x3e3/0x770 [ 750.129165] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 750.134118] ? iov_iter_bvec+0x130/0x130 [ 750.138198] ? lock_downgrade+0x720/0x720 [ 750.142356] ? iov_iter_pipe+0xb4/0x2c0 [ 750.146345] default_file_splice_read+0x191/0xa00 [ 750.151207] ? do_splice_direct+0x270/0x270 [ 750.155544] ? aa_path_link+0x410/0x410 [ 750.159530] ? free_unref_page+0xe9/0x170 [ 750.163701] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 750.168296] ? __put_page+0xcc/0x3a0 [ 750.172024] ? generic_pipe_buf_release+0x1cc/0x240 [ 750.177053] ? __splice_from_pipe+0x19f/0x800 [ 750.181565] ? fsnotify+0x84e/0xe10 [ 750.185214] ? fsnotify_first_mark+0x200/0x200 [ 750.189806] ? default_file_splice_write+0x117/0x180 [ 750.194916] ? generic_splice_sendpage+0x140/0x140 [ 750.199863] ? security_file_permission+0x1c0/0x220 [ 750.204894] ? do_splice_direct+0x270/0x270 [ 750.209231] do_splice_to+0x10e/0x160 [ 750.213050] splice_direct_to_actor+0x2b9/0x8d0 [ 750.217741] ? generic_pipe_buf_nosteal+0x10/0x10 [ 750.222608] ? do_splice_to+0x160/0x160 [ 750.226608] do_splice_direct+0x1a7/0x270 [ 750.230777] ? splice_direct_to_actor+0x8d0/0x8d0 [ 750.235648] ? security_file_permission+0x1c0/0x220 [ 750.240694] do_sendfile+0x550/0xc30 [ 750.244432] ? do_compat_pwritev64+0x1b0/0x1b0 [ 750.249032] ? vfs_write+0x393/0x540 [ 750.252765] __se_sys_sendfile64+0x147/0x160 [ 750.257183] ? __se_sys_sendfile+0x180/0x180 [ 750.261609] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 750.266990] ? trace_hardirqs_off_caller+0x6e/0x210 [ 750.272024] ? do_syscall_64+0x21/0x620 [ 750.276013] do_syscall_64+0xf9/0x620 [ 750.279834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 750.285036] RIP: 0033:0x7fc948a630c9 [ 750.288755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 750.307666] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.315388] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 750.322659] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 750.329929] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.337215] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 750.344478] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 25) 23:52:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632a756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:04 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x40e041) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, {0x3, 0x7fffffff, 0x4, 0x10000}}) 23:52:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010a6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00f0ff7f3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010b6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632b756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="effdffff3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:04 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x40e041) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, {0x3, 0x7fffffff, 0x4, 0x10000}}) 23:52:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010c6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 750.527584] FAULT_INJECTION: forcing a failure. [ 750.527584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 750.603947] CPU: 1 PID: 17775 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 750.611861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 750.621222] Call Trace: [ 750.623821] dump_stack+0x1fc/0x2ef [ 750.627465] should_fail.cold+0xa/0xf [ 750.631287] ? lock_acquire+0x170/0x3c0 [ 750.635282] ? setup_fault_attr+0x200/0x200 [ 750.639625] __alloc_pages_nodemask+0x239/0x2890 [ 750.644393] ? kasan_kmalloc+0x139/0x160 [ 750.648470] ? __kmalloc_node+0x4c/0x70 [ 750.652462] ? kvmalloc_node+0x61/0xf0 [ 750.656360] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 750.661477] ? default_file_splice_read+0x191/0xa00 [ 750.666502] ? do_splice_to+0x10e/0x160 [ 750.670496] ? do_sendfile+0x550/0xc30 [ 750.674417] ? perf_trace_lock+0xe2/0x4b0 [ 750.678583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 750.683434] ? perf_trace_lock_acquire+0x530/0x530 [ 750.688376] ? mark_held_locks+0xa6/0xf0 [ 750.692449] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 750.697575] ? should_fail+0x142/0x7b0 [ 750.701469] ? fs_reclaim_release+0xd0/0x110 [ 750.705886] ? setup_fault_attr+0x200/0x200 [ 750.710214] ? lock_acquire+0x170/0x3c0 [ 750.714204] ? check_preemption_disabled+0x41/0x280 [ 750.719234] ? __kmalloc_node+0x38/0x70 [ 750.723229] alloc_pages_current+0x193/0x2a0 [ 750.727652] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 750.732938] push_pipe+0x3e3/0x770 [ 750.736493] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 750.741430] ? iov_iter_bvec+0x130/0x130 [ 750.745480] ? lock_downgrade+0x720/0x720 [ 750.749607] ? iov_iter_pipe+0xb4/0x2c0 [ 750.753571] default_file_splice_read+0x191/0xa00 [ 750.758421] ? do_splice_direct+0x270/0x270 [ 750.762729] ? aa_path_link+0x410/0x410 [ 750.766695] ? free_unref_page+0xe9/0x170 [ 750.770829] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 750.775396] ? __put_page+0xcc/0x3a0 [ 750.779095] ? generic_pipe_buf_release+0x1cc/0x240 [ 750.784099] ? __splice_from_pipe+0x19f/0x800 [ 750.788580] ? fsnotify+0x84e/0xe10 [ 750.792197] ? fsnotify_first_mark+0x200/0x200 [ 750.796766] ? default_file_splice_write+0x117/0x180 [ 750.801852] ? generic_splice_sendpage+0x140/0x140 [ 750.806767] ? security_file_permission+0x1c0/0x220 [ 750.811768] ? do_splice_direct+0x270/0x270 [ 750.816076] do_splice_to+0x10e/0x160 [ 750.819863] splice_direct_to_actor+0x2b9/0x8d0 [ 750.824519] ? generic_pipe_buf_nosteal+0x10/0x10 [ 750.829479] ? do_splice_to+0x160/0x160 [ 750.833449] do_splice_direct+0x1a7/0x270 [ 750.837594] ? splice_direct_to_actor+0x8d0/0x8d0 [ 750.842429] ? security_file_permission+0x1c0/0x220 [ 750.847433] do_sendfile+0x550/0xc30 [ 750.851139] ? do_compat_pwritev64+0x1b0/0x1b0 [ 750.855706] ? vfs_write+0x393/0x540 [ 750.859404] __se_sys_sendfile64+0x147/0x160 [ 750.863796] ? __se_sys_sendfile+0x180/0x180 [ 750.868216] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 750.873595] ? trace_hardirqs_off_caller+0x6e/0x210 [ 750.878605] ? do_syscall_64+0x21/0x620 [ 750.882587] do_syscall_64+0xf9/0x620 [ 750.886377] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 750.891561] RIP: 0033:0x7fc948a630c9 [ 750.895285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 750.914172] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.921871] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 750.929140] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 750.936407] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.943690] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 750.950954] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 26) 23:52:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010e6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000f00010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x9}) 23:52:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632d756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:05 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x9}) 23:52:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632e756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010f6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 751.502908] FAULT_INJECTION: forcing a failure. [ 751.502908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.569727] CPU: 0 PID: 17817 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 751.577652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 751.587015] Call Trace: [ 751.589632] dump_stack+0x1fc/0x2ef [ 751.593300] should_fail.cold+0xa/0xf [ 751.597169] ? lock_acquire+0x170/0x3c0 [ 751.601160] ? setup_fault_attr+0x200/0x200 [ 751.605501] __alloc_pages_nodemask+0x239/0x2890 [ 751.610263] ? kasan_kmalloc+0x139/0x160 [ 751.614322] ? __kmalloc_node+0x4c/0x70 [ 751.618309] ? kvmalloc_node+0x61/0xf0 [ 751.622188] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 751.627275] ? default_file_splice_read+0x191/0xa00 [ 751.632280] ? do_splice_to+0x10e/0x160 [ 751.636244] ? do_sendfile+0x550/0xc30 [ 751.640123] ? perf_trace_lock+0xe2/0x4b0 [ 751.644262] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 751.649091] ? perf_trace_lock_acquire+0x530/0x530 [ 751.654011] ? mark_held_locks+0xa6/0xf0 [ 751.658063] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 751.663162] ? should_fail+0x142/0x7b0 [ 751.667040] ? fs_reclaim_release+0xd0/0x110 [ 751.671438] ? setup_fault_attr+0x200/0x200 [ 751.675747] ? lock_acquire+0x170/0x3c0 [ 751.679712] ? check_preemption_disabled+0x41/0x280 [ 751.684720] ? __kmalloc_node+0x38/0x70 [ 751.688691] alloc_pages_current+0x193/0x2a0 [ 751.693091] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 751.698358] push_pipe+0x3e3/0x770 [ 751.701912] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 751.706835] ? iov_iter_bvec+0x130/0x130 [ 751.710895] ? lock_downgrade+0x720/0x720 [ 751.715033] ? iov_iter_pipe+0xb4/0x2c0 [ 751.719009] default_file_splice_read+0x191/0xa00 [ 751.723870] ? do_splice_direct+0x270/0x270 [ 751.728185] ? aa_path_link+0x410/0x410 [ 751.732148] ? free_unref_page+0xe9/0x170 [ 751.736290] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 751.740868] ? __put_page+0xcc/0x3a0 [ 751.744599] ? generic_pipe_buf_release+0x1cc/0x240 [ 751.749609] ? __splice_from_pipe+0x19f/0x800 [ 751.754103] ? fsnotify+0x84e/0xe10 [ 751.757725] ? fsnotify_first_mark+0x200/0x200 [ 751.762300] ? default_file_splice_write+0x117/0x180 [ 751.767396] ? generic_splice_sendpage+0x140/0x140 [ 751.772357] ? security_file_permission+0x1c0/0x220 [ 751.777373] ? do_splice_direct+0x270/0x270 [ 751.781694] do_splice_to+0x10e/0x160 [ 751.785498] splice_direct_to_actor+0x2b9/0x8d0 [ 751.790163] ? generic_pipe_buf_nosteal+0x10/0x10 [ 751.795000] ? do_splice_to+0x160/0x160 [ 751.799006] do_splice_direct+0x1a7/0x270 [ 751.803148] ? splice_direct_to_actor+0x8d0/0x8d0 [ 751.808002] ? security_file_permission+0x1c0/0x220 [ 751.813031] do_sendfile+0x550/0xc30 [ 751.816755] ? do_compat_pwritev64+0x1b0/0x1b0 [ 751.821373] ? vfs_write+0x393/0x540 [ 751.825084] __se_sys_sendfile64+0x147/0x160 [ 751.829507] ? __se_sys_sendfile+0x180/0x180 [ 751.833908] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 751.839293] ? trace_hardirqs_off_caller+0x6e/0x210 [ 751.844299] ? do_syscall_64+0x21/0x620 [ 751.848262] do_syscall_64+0xf9/0x620 [ 751.852060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 751.857239] RIP: 0033:0x7fc948a630c9 [ 751.860941] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.879842] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 751.887565] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 751.894838] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 751.902103] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.909377] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 23:52:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006330756d00000000200002801c0001"], 0x64}}, 0x0) [ 751.916636] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 27) 23:52:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001106373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x9}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x2, 0x9}) (async) 23:52:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006358756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640200003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x280400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) 23:52:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640300003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006363756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001486373756d00000000200002801c0001"], 0x64}}, 0x0) [ 752.498997] FAULT_INJECTION: forcing a failure. [ 752.498997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 752.555598] CPU: 0 PID: 17856 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 752.563513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 752.572881] Call Trace: [ 752.575485] dump_stack+0x1fc/0x2ef [ 752.579142] should_fail.cold+0xa/0xf [ 752.582963] ? lock_acquire+0x170/0x3c0 [ 752.586953] ? setup_fault_attr+0x200/0x200 [ 752.591311] __alloc_pages_nodemask+0x239/0x2890 [ 752.596087] ? kasan_kmalloc+0x139/0x160 [ 752.600161] ? __kmalloc_node+0x4c/0x70 [ 752.604147] ? kvmalloc_node+0x61/0xf0 [ 752.608043] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 752.613154] ? default_file_splice_read+0x191/0xa00 [ 752.618186] ? do_splice_to+0x10e/0x160 [ 752.622178] ? do_sendfile+0x550/0xc30 [ 752.626085] ? perf_trace_lock+0xe2/0x4b0 [ 752.630258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 752.635120] ? perf_trace_lock_acquire+0x530/0x530 [ 752.640059] ? mark_held_locks+0xa6/0xf0 [ 752.644137] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 752.649256] ? should_fail+0x142/0x7b0 [ 752.653154] ? fs_reclaim_release+0xd0/0x110 [ 752.657575] ? setup_fault_attr+0x200/0x200 [ 752.661911] ? lock_acquire+0x170/0x3c0 [ 752.665902] ? check_preemption_disabled+0x41/0x280 [ 752.670931] ? __kmalloc_node+0x38/0x70 [ 752.674925] alloc_pages_current+0x193/0x2a0 [ 752.679344] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 752.684638] push_pipe+0x3e3/0x770 [ 752.688230] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 752.693181] ? iov_iter_bvec+0x130/0x130 [ 752.697264] ? lock_downgrade+0x720/0x720 [ 752.701440] ? iov_iter_pipe+0xb4/0x2c0 [ 752.705432] default_file_splice_read+0x191/0xa00 [ 752.710298] ? do_splice_direct+0x270/0x270 [ 752.714733] ? aa_path_link+0x410/0x410 [ 752.718722] ? free_unref_page+0xe9/0x170 [ 752.722879] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 752.727504] ? __put_page+0xcc/0x3a0 [ 752.731242] ? generic_pipe_buf_release+0x1cc/0x240 [ 752.736270] ? __splice_from_pipe+0x19f/0x800 [ 752.740780] ? fsnotify+0x84e/0xe10 [ 752.744423] ? fsnotify_first_mark+0x200/0x200 [ 752.749016] ? default_file_splice_write+0x117/0x180 [ 752.754176] ? generic_splice_sendpage+0x140/0x140 [ 752.759140] ? security_file_permission+0x1c0/0x220 [ 752.764158] ? do_splice_direct+0x270/0x270 [ 752.768480] do_splice_to+0x10e/0x160 [ 752.772281] splice_direct_to_actor+0x2b9/0x8d0 [ 752.776942] ? generic_pipe_buf_nosteal+0x10/0x10 [ 752.781792] ? do_splice_to+0x160/0x160 [ 752.785774] do_splice_direct+0x1a7/0x270 [ 752.789927] ? splice_direct_to_actor+0x8d0/0x8d0 [ 752.794768] ? security_file_permission+0x1c0/0x220 [ 752.799789] do_sendfile+0x550/0xc30 [ 752.803529] ? do_compat_pwritev64+0x1b0/0x1b0 [ 752.808122] ? vfs_write+0x393/0x540 [ 752.811851] __se_sys_sendfile64+0x147/0x160 [ 752.816256] ? __se_sys_sendfile+0x180/0x180 [ 752.820669] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 752.826038] ? trace_hardirqs_off_caller+0x6e/0x210 [ 752.831074] ? do_syscall_64+0x21/0x620 [ 752.835054] do_syscall_64+0xf9/0x620 [ 752.838859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.844063] RIP: 0033:0x7fc948a630c9 [ 752.847764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 752.866659] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 752.874355] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 752.881610] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 752.888873] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.896138] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 752.903394] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 28) 23:52:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006364756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640400003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900014c6373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x280400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x280400, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) (async) 23:52:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640600003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 753.383388] nla_parse: 32 callbacks suppressed [ 753.383400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001606373756d00000000200002801c0001"], 0x64}}, 0x0) [ 753.437997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x280400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) (rerun: 32) [ 753.493360] FAULT_INJECTION: forcing a failure. [ 753.493360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 753.517680] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.547679] CPU: 0 PID: 17893 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 753.555601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 753.564970] Call Trace: [ 753.567571] dump_stack+0x1fc/0x2ef [ 753.571230] should_fail.cold+0xa/0xf [ 753.575055] ? lock_acquire+0x170/0x3c0 [ 753.579048] ? setup_fault_attr+0x200/0x200 [ 753.583396] __alloc_pages_nodemask+0x239/0x2890 [ 753.588171] ? kasan_kmalloc+0x139/0x160 [ 753.592298] ? __kmalloc_node+0x4c/0x70 23:52:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 753.596285] ? kvmalloc_node+0x61/0xf0 [ 753.600186] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 753.605300] ? default_file_splice_read+0x191/0xa00 [ 753.610332] ? do_splice_to+0x10e/0x160 [ 753.614324] ? do_sendfile+0x550/0xc30 [ 753.618225] ? perf_trace_lock+0xe2/0x4b0 [ 753.622392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 753.627251] ? perf_trace_lock_acquire+0x530/0x530 [ 753.632196] ? mark_held_locks+0xa6/0xf0 [ 753.636277] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 753.641418] ? should_fail+0x142/0x7b0 23:52:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xac0e0000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 753.645316] ? fs_reclaim_release+0xd0/0x110 [ 753.649740] ? setup_fault_attr+0x200/0x200 [ 753.654071] ? lock_acquire+0x170/0x3c0 [ 753.658073] ? check_preemption_disabled+0x41/0x280 [ 753.663111] ? __kmalloc_node+0x38/0x70 [ 753.667106] alloc_pages_current+0x193/0x2a0 [ 753.671527] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 753.676818] push_pipe+0x3e3/0x770 [ 753.680382] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 753.685336] ? iov_iter_bvec+0x130/0x130 [ 753.689414] ? lock_downgrade+0x720/0x720 [ 753.693554] ? iov_iter_pipe+0xb4/0x2c0 [ 753.697517] default_file_splice_read+0x191/0xa00 [ 753.702353] ? do_splice_direct+0x270/0x270 [ 753.706713] ? aa_path_link+0x410/0x410 [ 753.710673] ? free_unref_page+0xe9/0x170 [ 753.714820] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 753.719385] ? __put_page+0xcc/0x3a0 [ 753.723091] ? generic_pipe_buf_release+0x1cc/0x240 [ 753.728091] ? __splice_from_pipe+0x19f/0x800 [ 753.732574] ? fsnotify+0x84e/0xe10 [ 753.736211] ? fsnotify_first_mark+0x200/0x200 [ 753.740784] ? default_file_splice_write+0x117/0x180 [ 753.745868] ? generic_splice_sendpage+0x140/0x140 [ 753.750787] ? security_file_permission+0x1c0/0x220 [ 753.755910] ? do_splice_direct+0x270/0x270 [ 753.760234] do_splice_to+0x10e/0x160 [ 753.764048] splice_direct_to_actor+0x2b9/0x8d0 [ 753.768710] ? generic_pipe_buf_nosteal+0x10/0x10 [ 753.773538] ? do_splice_to+0x160/0x160 [ 753.777501] do_splice_direct+0x1a7/0x270 [ 753.781638] ? splice_direct_to_actor+0x8d0/0x8d0 [ 753.786484] ? security_file_permission+0x1c0/0x220 [ 753.791503] do_sendfile+0x550/0xc30 [ 753.795226] ? do_compat_pwritev64+0x1b0/0x1b0 [ 753.799801] ? vfs_write+0x393/0x540 [ 753.803522] __se_sys_sendfile64+0x147/0x160 [ 753.807920] ? __se_sys_sendfile+0x180/0x180 [ 753.812317] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 753.817666] ? trace_hardirqs_off_caller+0x6e/0x210 [ 753.822678] ? do_syscall_64+0x21/0x620 [ 753.826656] do_syscall_64+0xf9/0x620 [ 753.830458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 753.835638] RIP: 0033:0x7fc948a630c9 [ 753.839349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.858240] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.865949] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 753.873237] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 753.880492] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.887749] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 753.895004] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:08 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 29) 23:52:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xc00e0000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001686373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640700003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006369756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x3, 0x3ff, 0x2, 0x0, 0x1, 0x7, 0xac4, 0x3]}) 23:52:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640800003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 754.368783] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:08 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x3, 0x3ff, 0x2, 0x0, 0x1, 0x7, 0xac4, 0x3]}) 23:52:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100636c756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900016c6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 754.425992] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.454124] FAULT_INJECTION: forcing a failure. [ 754.454124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640a00003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 754.551213] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.555268] CPU: 1 PID: 17940 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 754.567720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 754.576349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 754.577076] Call Trace: [ 754.588242] dump_stack+0x1fc/0x2ef [ 754.591891] should_fail.cold+0xa/0xf [ 754.595712] ? lock_acquire+0x170/0x3c0 [ 754.599698] ? setup_fault_attr+0x200/0x200 [ 754.604048] __alloc_pages_nodemask+0x239/0x2890 [ 754.608820] ? kasan_kmalloc+0x139/0x160 [ 754.612898] ? __kmalloc_node+0x4c/0x70 [ 754.616888] ? kvmalloc_node+0x61/0xf0 [ 754.620783] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 754.625907] ? default_file_splice_read+0x191/0xa00 [ 754.630935] ? do_splice_to+0x10e/0x160 [ 754.634925] ? do_sendfile+0x550/0xc30 [ 754.638828] ? perf_trace_lock+0xe2/0x4b0 [ 754.643000] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 754.647850] ? perf_trace_lock_acquire+0x530/0x530 [ 754.652789] ? mark_held_locks+0xa6/0xf0 [ 754.656875] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 754.661998] ? should_fail+0x142/0x7b0 [ 754.665895] ? fs_reclaim_release+0xd0/0x110 [ 754.670339] ? setup_fault_attr+0x200/0x200 [ 754.674772] ? lock_acquire+0x170/0x3c0 [ 754.678760] ? check_preemption_disabled+0x41/0x280 [ 754.683792] ? __kmalloc_node+0x38/0x70 [ 754.687784] alloc_pages_current+0x193/0x2a0 [ 754.692205] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 754.697498] push_pipe+0x3e3/0x770 [ 754.701174] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 754.706137] ? iov_iter_bvec+0x130/0x130 [ 754.710223] ? lock_downgrade+0x720/0x720 [ 754.714378] ? iov_iter_pipe+0xb4/0x2c0 [ 754.718376] default_file_splice_read+0x191/0xa00 [ 754.723244] ? do_splice_direct+0x270/0x270 [ 754.727585] ? aa_path_link+0x410/0x410 [ 754.731605] ? free_unref_page+0xe9/0x170 [ 754.735767] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 754.740364] ? __put_page+0xcc/0x3a0 [ 754.744134] ? generic_pipe_buf_release+0x1cc/0x240 [ 754.749167] ? __splice_from_pipe+0x19f/0x800 [ 754.753677] ? fsnotify+0x84e/0xe10 [ 754.757323] ? fsnotify_first_mark+0x200/0x200 [ 754.761924] ? default_file_splice_write+0x117/0x180 [ 754.767020] ? generic_splice_sendpage+0x140/0x140 [ 754.771965] ? security_file_permission+0x1c0/0x220 [ 754.776989] ? do_splice_direct+0x270/0x270 [ 754.781299] do_splice_to+0x10e/0x160 [ 754.785092] splice_direct_to_actor+0x2b9/0x8d0 [ 754.789767] ? generic_pipe_buf_nosteal+0x10/0x10 [ 754.794608] ? do_splice_to+0x160/0x160 [ 754.798596] do_splice_direct+0x1a7/0x270 [ 754.802733] ? splice_direct_to_actor+0x8d0/0x8d0 [ 754.807565] ? security_file_permission+0x1c0/0x220 [ 754.812575] do_sendfile+0x550/0xc30 [ 754.816388] ? do_compat_pwritev64+0x1b0/0x1b0 [ 754.820964] ? vfs_write+0x393/0x540 [ 754.824671] __se_sys_sendfile64+0x147/0x160 [ 754.829080] ? __se_sys_sendfile+0x180/0x180 [ 754.833489] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 754.838844] ? trace_hardirqs_off_caller+0x6e/0x210 [ 754.843871] ? do_syscall_64+0x21/0x620 [ 754.847850] do_syscall_64+0xf9/0x620 [ 754.851652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 754.856826] RIP: 0033:0x7fc948a630c9 [ 754.860520] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 754.879409] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.887106] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 754.894385] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 754.901649] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.908923] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 754.916189] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:09 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 30) 23:52:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640c00003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100636f756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001746373756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async, rerun: 32) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x3, 0x3ff, 0x2, 0x0, 0x1, 0x7, 0xac4, 0x3]}) (rerun: 32) 23:52:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x2, 0x6, r1, 0x0, &(0x7f00000000c0)={0x980001, 0x7, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006370756d00000000200002801c0001"], 0x64}}, 0x0) [ 755.410319] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640e00003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 755.468154] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 755.496743] FAULT_INJECTION: forcing a failure. [ 755.496743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900017a6373756d00000000200002801c0001"], 0x64}}, 0x0) [ 755.565910] CPU: 0 PID: 17981 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 755.571979] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 755.573814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 755.573821] Call Trace: [ 755.573844] dump_stack+0x1fc/0x2ef [ 755.573864] should_fail.cold+0xa/0xf [ 755.573881] ? lock_acquire+0x170/0x3c0 [ 755.573896] ? setup_fault_attr+0x200/0x200 [ 755.573923] __alloc_pages_nodemask+0x239/0x2890 23:52:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 755.573940] ? kasan_kmalloc+0x139/0x160 [ 755.573956] ? __kmalloc_node+0x4c/0x70 [ 755.573970] ? kvmalloc_node+0x61/0xf0 [ 755.573983] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 755.573994] ? default_file_splice_read+0x191/0xa00 [ 755.574013] ? do_splice_to+0x10e/0x160 [ 755.640907] ? do_sendfile+0x550/0xc30 [ 755.644813] ? perf_trace_lock+0xe2/0x4b0 [ 755.648990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 755.653845] ? perf_trace_lock_acquire+0x530/0x530 [ 755.658792] ? mark_held_locks+0xa6/0xf0 [ 755.662867] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 755.667987] ? should_fail+0x142/0x7b0 [ 755.671887] ? fs_reclaim_release+0xd0/0x110 [ 755.676310] ? setup_fault_attr+0x200/0x200 [ 755.680645] ? lock_acquire+0x170/0x3c0 [ 755.684656] ? check_preemption_disabled+0x41/0x280 [ 755.689687] ? __kmalloc_node+0x38/0x70 [ 755.693678] alloc_pages_current+0x193/0x2a0 [ 755.698159] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 755.703453] push_pipe+0x3e3/0x770 [ 755.707031] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 755.711978] ? iov_iter_bvec+0x130/0x130 [ 755.716058] ? lock_downgrade+0x720/0x720 [ 755.720212] ? iov_iter_pipe+0xb4/0x2c0 [ 755.724280] default_file_splice_read+0x191/0xa00 [ 755.729147] ? do_splice_direct+0x270/0x270 [ 755.733592] ? aa_path_link+0x410/0x410 [ 755.737582] ? free_unref_page+0xe9/0x170 [ 755.741749] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 755.746351] ? __put_page+0xcc/0x3a0 [ 755.750087] ? generic_pipe_buf_release+0x1cc/0x240 [ 755.755116] ? __splice_from_pipe+0x19f/0x800 [ 755.759624] ? fsnotify+0x84e/0xe10 [ 755.763266] ? fsnotify_first_mark+0x200/0x200 [ 755.767873] ? default_file_splice_write+0x117/0x180 [ 755.772989] ? generic_splice_sendpage+0x140/0x140 [ 755.777939] ? security_file_permission+0x1c0/0x220 [ 755.782976] ? do_splice_direct+0x270/0x270 [ 755.787317] do_splice_to+0x10e/0x160 [ 755.791133] splice_direct_to_actor+0x2b9/0x8d0 [ 755.795821] ? generic_pipe_buf_nosteal+0x10/0x10 [ 755.800680] ? do_splice_to+0x160/0x160 [ 755.804681] do_splice_direct+0x1a7/0x270 [ 755.808843] ? splice_direct_to_actor+0x8d0/0x8d0 [ 755.813705] ? security_file_permission+0x1c0/0x220 [ 755.818740] do_sendfile+0x550/0xc30 [ 755.822477] ? do_compat_pwritev64+0x1b0/0x1b0 [ 755.827060] ? vfs_write+0x393/0x540 [ 755.830771] __se_sys_sendfile64+0x147/0x160 [ 755.835162] ? __se_sys_sendfile+0x180/0x180 [ 755.839571] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 755.844936] ? trace_hardirqs_off_caller+0x6e/0x210 [ 755.849945] ? do_syscall_64+0x21/0x620 [ 755.853910] do_syscall_64+0xf9/0x620 [ 755.857725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.862946] RIP: 0033:0x7fc948a630c9 [ 755.866671] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.885566] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.893279] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 755.900544] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 755.907815] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.915073] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 755.922352] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:10 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 31) 23:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006375756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001000a73756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:10 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x2, 0x6, r1, 0x0, &(0x7f00000000c0)={0x980001, 0x7, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x2, 0x6, r1, 0x0, &(0x7f00000000c0)={0x980001, 0x7, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) 23:52:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640f00003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="641000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001002573756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:10 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x2, 0x6, r1, 0x0, &(0x7f00000000c0)={0x980001, 0x7, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x2, 0x6, r1, 0x0, &(0x7f00000000c0)={0x980001, 0x7, '\x00', @p_u8=&(0x7f0000000080)=0x1}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) 23:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006378756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="646000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 756.508492] FAULT_INJECTION: forcing a failure. [ 756.508492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.560071] CPU: 1 PID: 18024 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 756.568008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 756.577382] Call Trace: [ 756.579989] dump_stack+0x1fc/0x2ef [ 756.583645] should_fail.cold+0xa/0xf [ 756.587456] ? lock_acquire+0x170/0x3c0 [ 756.591443] ? setup_fault_attr+0x200/0x200 [ 756.595791] __alloc_pages_nodemask+0x239/0x2890 [ 756.600561] ? kasan_kmalloc+0x139/0x160 [ 756.604634] ? __kmalloc_node+0x4c/0x70 [ 756.608626] ? kvmalloc_node+0x61/0xf0 [ 756.612523] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 756.617630] ? default_file_splice_read+0x191/0xa00 [ 756.622653] ? do_splice_to+0x10e/0x160 [ 756.626641] ? do_sendfile+0x550/0xc30 [ 756.630542] ? perf_trace_lock+0xe2/0x4b0 [ 756.634749] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 756.639602] ? perf_trace_lock_acquire+0x530/0x530 [ 756.644545] ? mark_held_locks+0xa6/0xf0 [ 756.648619] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 756.653737] ? should_fail+0x142/0x7b0 [ 756.657637] ? fs_reclaim_release+0xd0/0x110 [ 756.662061] ? setup_fault_attr+0x200/0x200 [ 756.666396] ? lock_acquire+0x170/0x3c0 [ 756.670387] ? check_preemption_disabled+0x41/0x280 [ 756.675413] ? __kmalloc_node+0x38/0x70 [ 756.679405] alloc_pages_current+0x193/0x2a0 [ 756.683821] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 756.689095] push_pipe+0x3e3/0x770 [ 756.692622] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 756.697545] ? iov_iter_bvec+0x130/0x130 [ 756.701600] ? lock_downgrade+0x720/0x720 [ 756.705728] ? iov_iter_pipe+0xb4/0x2c0 [ 756.709702] default_file_splice_read+0x191/0xa00 [ 756.714532] ? do_splice_direct+0x270/0x270 [ 756.718920] ? aa_path_link+0x410/0x410 [ 756.722879] ? free_unref_page+0xe9/0x170 [ 756.727026] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 756.731609] ? __put_page+0xcc/0x3a0 [ 756.735322] ? generic_pipe_buf_release+0x1cc/0x240 [ 756.740321] ? __splice_from_pipe+0x19f/0x800 [ 756.744798] ? fsnotify+0x84e/0xe10 [ 756.748424] ? fsnotify_first_mark+0x200/0x200 [ 756.753349] ? default_file_splice_write+0x117/0x180 [ 756.758432] ? generic_splice_sendpage+0x140/0x140 [ 756.763348] ? security_file_permission+0x1c0/0x220 [ 756.768351] ? do_splice_direct+0x270/0x270 [ 756.772655] do_splice_to+0x10e/0x160 [ 756.776443] splice_direct_to_actor+0x2b9/0x8d0 [ 756.781093] ? generic_pipe_buf_nosteal+0x10/0x10 [ 756.785921] ? do_splice_to+0x160/0x160 [ 756.789885] do_splice_direct+0x1a7/0x270 [ 756.794036] ? splice_direct_to_actor+0x8d0/0x8d0 [ 756.798880] ? security_file_permission+0x1c0/0x220 [ 756.803897] do_sendfile+0x550/0xc30 [ 756.807619] ? do_compat_pwritev64+0x1b0/0x1b0 [ 756.812197] ? vfs_write+0x393/0x540 [ 756.815914] __se_sys_sendfile64+0x147/0x160 [ 756.820312] ? __se_sys_sendfile+0x180/0x180 [ 756.824702] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 756.830051] ? trace_hardirqs_off_caller+0x6e/0x210 [ 756.835050] ? do_syscall_64+0x21/0x620 [ 756.839009] do_syscall_64+0xf9/0x620 [ 756.842796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.847965] RIP: 0033:0x7fc948a630c9 [ 756.851663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 756.870576] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.878264] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 756.885512] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 756.892760] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.900010] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 756.907276] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:11 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 32) 23:52:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64f000003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063730a6d00000000200002801c0001"], 0x64}}, 0x0) 23:52:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100630a756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:11 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x0, 0x3, "4864090db789a9ffb8b9ac9502f1df45426c4cdb73897cc79e4731ff3a5fc661", 0x9, 0x0, 0x90, 0x8, 0x4, 0xfff, 0x8ea2, 0xada4, [0x8, 0xfff, 0x1, 0x1d]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x30, r0, 0x29386000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:52:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:11 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x0, 0x3, "4864090db789a9ffb8b9ac9502f1df45426c4cdb73897cc79e4731ff3a5fc661", 0x9, 0x0, 0x90, 0x8, 0x4, 0xfff, 0x8ea2, 0xada4, [0x8, 0xfff, 0x1, 0x1d]}) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x30, r0, 0x29386000) (async, rerun: 32) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:52:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640003003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373256d00000000200002801c0001"], 0x64}}, 0x0) [ 757.456104] FAULT_INJECTION: forcing a failure. [ 757.456104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.516652] CPU: 1 PID: 18065 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 757.524556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 757.533917] Call Trace: [ 757.536524] dump_stack+0x1fc/0x2ef [ 757.540171] should_fail.cold+0xa/0xf [ 757.543986] ? lock_acquire+0x170/0x3c0 [ 757.547971] ? setup_fault_attr+0x200/0x200 [ 757.552322] __alloc_pages_nodemask+0x239/0x2890 [ 757.557093] ? kasan_kmalloc+0x139/0x160 [ 757.561167] ? __kmalloc_node+0x4c/0x70 [ 757.565156] ? kvmalloc_node+0x61/0xf0 [ 757.569053] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 757.574167] ? default_file_splice_read+0x191/0xa00 [ 757.579203] ? do_splice_to+0x10e/0x160 [ 757.583194] ? do_sendfile+0x550/0xc30 [ 757.587092] ? perf_trace_lock+0xe2/0x4b0 [ 757.591264] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.596124] ? perf_trace_lock_acquire+0x530/0x530 [ 757.601064] ? mark_held_locks+0xa6/0xf0 [ 757.605142] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 757.610279] ? should_fail+0x142/0x7b0 23:52:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640006003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 757.614188] ? fs_reclaim_release+0xd0/0x110 [ 757.618611] ? setup_fault_attr+0x200/0x200 [ 757.622948] ? lock_acquire+0x170/0x3c0 [ 757.626937] ? check_preemption_disabled+0x41/0x280 [ 757.631970] ? __kmalloc_node+0x38/0x70 [ 757.635974] alloc_pages_current+0x193/0x2a0 [ 757.640404] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 757.645703] push_pipe+0x3e3/0x770 [ 757.649308] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 757.654263] ? iov_iter_bvec+0x130/0x130 [ 757.658355] ? lock_downgrade+0x720/0x720 [ 757.662510] ? iov_iter_pipe+0xb4/0x2c0 [ 757.666512] default_file_splice_read+0x191/0xa00 [ 757.671375] ? do_splice_direct+0x270/0x270 [ 757.675691] ? aa_path_link+0x410/0x410 [ 757.679663] ? free_unref_page+0xe9/0x170 [ 757.683809] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 757.688379] ? __put_page+0xcc/0x3a0 [ 757.692078] ? generic_pipe_buf_release+0x1cc/0x240 [ 757.697081] ? __splice_from_pipe+0x19f/0x800 [ 757.701570] ? fsnotify+0x84e/0xe10 [ 757.705184] ? fsnotify_first_mark+0x200/0x200 [ 757.709818] ? default_file_splice_write+0x117/0x180 [ 757.714919] ? generic_splice_sendpage+0x140/0x140 [ 757.719837] ? security_file_permission+0x1c0/0x220 [ 757.724839] ? do_splice_direct+0x270/0x270 [ 757.729163] do_splice_to+0x10e/0x160 [ 757.732976] splice_direct_to_actor+0x2b9/0x8d0 [ 757.737648] ? generic_pipe_buf_nosteal+0x10/0x10 [ 757.742476] ? do_splice_to+0x160/0x160 [ 757.746455] do_splice_direct+0x1a7/0x270 [ 757.750606] ? splice_direct_to_actor+0x8d0/0x8d0 [ 757.755442] ? security_file_permission+0x1c0/0x220 [ 757.760448] do_sendfile+0x550/0xc30 [ 757.764154] ? do_compat_pwritev64+0x1b0/0x1b0 [ 757.768758] ? vfs_write+0x393/0x540 [ 757.772461] __se_sys_sendfile64+0x147/0x160 [ 757.776854] ? __se_sys_sendfile+0x180/0x180 [ 757.781256] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 757.786625] ? trace_hardirqs_off_caller+0x6e/0x210 [ 757.791637] ? do_syscall_64+0x21/0x620 [ 757.795598] do_syscall_64+0xf9/0x620 [ 757.799386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 757.804561] RIP: 0033:0x7fc948a630c9 [ 757.808274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 757.827172] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.834898] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 757.842175] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 757.849439] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.856697] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 23:52:11 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x0, 0x3, "4864090db789a9ffb8b9ac9502f1df45426c4cdb73897cc79e4731ff3a5fc661", 0x9, 0x0, 0x90, 0x8, 0x4, 0xfff, 0x8ea2, 0xada4, [0x8, 0xfff, 0x1, 0x1d]}) (async, rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x30, r0, 0x29386000) (async, rerun: 32) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 757.863952] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 33) 23:52:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006323756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373586d00000000200002801c0001"], 0x64}}, 0x0) 23:52:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640007003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:12 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_names\x00') connect$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x1, 0x2, @start={0xfffffff9, 0x1}}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000340)="ac2f6dcf17692513f39a19e66f60a31f9874f0c7c545c109a1b95484d73bc77a591097f9b411dc122fc9567c2afe16c2d79d63d2e48c2b680487d196d1a2c19f4da07faf3d70a717f1e8e1f59b59b2741876b388381b18daff6ca521339f808afa58bacfe2a87c90878c5186f17cfae521b2318c3b485f66413b95b42a1c69c5c8f7eec34f470ae186aafe21a83a8706350edd62399d596e18ffbdf700"/168, {0x4, 0x39, 0x34363248, 0x0, 0x4, 0x7c1, 0xc}}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x48, 0xc, 0x2, "59560f6a58e2417146fc1708c35b769c7b144efc85bf7acd98060d4370983ca3", 0x35323645}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000300)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000a003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 758.424156] nla_parse: 8 callbacks suppressed [ 758.424167] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:12 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_names\x00') connect$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) fcntl$setlease(r1, 0x400, 0x2) (async, rerun: 64) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x1, 0x2, @start={0xfffffff9, 0x1}}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000340)="ac2f6dcf17692513f39a19e66f60a31f9874f0c7c545c109a1b95484d73bc77a591097f9b411dc122fc9567c2afe16c2d79d63d2e48c2b680487d196d1a2c19f4da07faf3d70a717f1e8e1f59b59b2741876b388381b18daff6ca521339f808afa58bacfe2a87c90878c5186f17cfae521b2318c3b485f66413b95b42a1c69c5c8f7eec34f470ae186aafe21a83a8706350edd62399d596e18ffbdf700"/168, {0x4, 0x39, 0x34363248, 0x0, 0x4, 0x7c1, 0xc}}) (async, rerun: 64) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (rerun: 64) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x48, 0xc, 0x2, "59560f6a58e2417146fc1708c35b769c7b144efc85bf7acd98060d4370983ca3", 0x35323645}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000300)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 758.468532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 758.486842] FAULT_INJECTION: forcing a failure. [ 758.486842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373636d00000000200002801c0001"], 0x64}}, 0x0) [ 758.550669] CPU: 0 PID: 18113 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 758.558582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 758.567943] Call Trace: [ 758.570552] dump_stack+0x1fc/0x2ef [ 758.574200] should_fail.cold+0xa/0xf [ 758.578013] ? lock_acquire+0x170/0x3c0 [ 758.581994] ? setup_fault_attr+0x200/0x200 [ 758.586338] __alloc_pages_nodemask+0x239/0x2890 [ 758.591112] ? kasan_kmalloc+0x139/0x160 [ 758.595182] ? __kmalloc_node+0x4c/0x70 [ 758.599168] ? kvmalloc_node+0x61/0xf0 [ 758.603068] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 758.608172] ? default_file_splice_read+0x191/0xa00 [ 758.613201] ? do_splice_to+0x10e/0x160 [ 758.617186] ? do_sendfile+0x550/0xc30 [ 758.621092] ? perf_trace_lock+0xe2/0x4b0 [ 758.625255] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 758.630133] ? perf_trace_lock_acquire+0x530/0x530 [ 758.635074] ? mark_held_locks+0xa6/0xf0 [ 758.636522] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 758.639144] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 758.639166] ? should_fail+0x142/0x7b0 [ 758.639180] ? fs_reclaim_release+0xd0/0x110 [ 758.639194] ? setup_fault_attr+0x200/0x200 [ 758.639208] ? lock_acquire+0x170/0x3c0 [ 758.639224] ? check_preemption_disabled+0x41/0x280 [ 758.639240] ? __kmalloc_node+0x38/0x70 [ 758.639262] alloc_pages_current+0x193/0x2a0 [ 758.639277] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 758.639291] push_pipe+0x3e3/0x770 [ 758.639313] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 758.639333] ? iov_iter_bvec+0x130/0x130 23:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373646d00000000200002801c0001"], 0x64}}, 0x0) [ 758.639349] ? lock_downgrade+0x720/0x720 [ 758.639359] ? iov_iter_pipe+0xb4/0x2c0 [ 758.639376] default_file_splice_read+0x191/0xa00 [ 758.639400] ? do_splice_direct+0x270/0x270 [ 758.718062] ? aa_path_link+0x410/0x410 [ 758.722238] ? free_unref_page+0xe9/0x170 [ 758.726416] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 758.731013] ? __put_page+0xcc/0x3a0 [ 758.734744] ? generic_pipe_buf_release+0x1cc/0x240 [ 758.739790] ? __splice_from_pipe+0x19f/0x800 [ 758.744292] ? fsnotify+0x84e/0xe10 [ 758.747929] ? fsnotify_first_mark+0x200/0x200 [ 758.752521] ? default_file_splice_write+0x117/0x180 [ 758.757636] ? generic_splice_sendpage+0x140/0x140 [ 758.762584] ? security_file_permission+0x1c0/0x220 [ 758.767617] ? do_splice_direct+0x270/0x270 [ 758.771958] do_splice_to+0x10e/0x160 [ 758.775476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 758.775773] splice_direct_to_actor+0x2b9/0x8d0 [ 758.775795] ? generic_pipe_buf_nosteal+0x10/0x10 [ 758.775815] ? do_splice_to+0x160/0x160 [ 758.775839] do_splice_direct+0x1a7/0x270 [ 758.775857] ? splice_direct_to_actor+0x8d0/0x8d0 [ 758.775880] ? security_file_permission+0x1c0/0x220 [ 758.775902] do_sendfile+0x550/0xc30 [ 758.775926] ? do_compat_pwritev64+0x1b0/0x1b0 [ 758.820229] ? vfs_write+0x393/0x540 [ 758.823968] __se_sys_sendfile64+0x147/0x160 [ 758.828392] ? __se_sys_sendfile+0x180/0x180 [ 758.832835] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 758.838214] ? trace_hardirqs_off_caller+0x6e/0x210 [ 758.843259] ? do_syscall_64+0x21/0x620 [ 758.847259] do_syscall_64+0xf9/0x620 23:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373696d00000000200002801c0001"], 0x64}}, 0x0) [ 758.851084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.856285] RIP: 0033:0x7fc948a630c9 [ 758.860010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 758.878918] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 758.886652] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 758.893935] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 758.901218] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.908502] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 758.915783] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 [ 758.963491] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:13 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 34) 23:52:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006325756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64850a003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:13 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_names\x00') connect$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x1, 0x2, @start={0xfffffff9, 0x1}}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000340)="ac2f6dcf17692513f39a19e66f60a31f9874f0c7c545c109a1b95484d73bc77a591097f9b411dc122fc9567c2afe16c2d79d63d2e48c2b680487d196d1a2c19f4da07faf3d70a717f1e8e1f59b59b2741876b388381b18daff6ca521339f808afa58bacfe2a87c90878c5186f17cfae521b2318c3b485f66413b95b42a1c69c5c8f7eec34f470ae186aafe21a83a8706350edd62399d596e18ffbdf700"/168, {0x4, 0x39, 0x34363248, 0x0, 0x4, 0x7c1, 0xc}}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x48, 0xc, 0x2, "59560f6a58e2417146fc1708c35b769c7b144efc85bf7acd98060d4370983ca3", 0x35323645}) (async) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000300)) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063736c6d00000000200002801c0001"], 0x64}}, 0x0) 23:52:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000c003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 759.398268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063736f6d00000000200002801c0001"], 0x64}}, 0x0) [ 759.454517] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 759.472823] FAULT_INJECTION: forcing a failure. [ 759.472823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:13 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x200, 0x2, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x67, 0x0, 0xf4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x3, [0x7, 0x3, 0x7, 0x5d, 0xffffffff]}, @lsrr={0x83, 0x13, 0x92, [@multicast1, @empty, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x7, [{@loopback, 0x4}, {@loopback, 0x4}]}, @ssrr={0x89, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0x5, "de41fd"}, {0x0, 0x8, "1f4d66be1ff8"}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private=0xa010100, @remote, r1}, 0xc) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) [ 759.522357] CPU: 0 PID: 18160 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 759.530292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 759.539654] Call Trace: [ 759.542258] dump_stack+0x1fc/0x2ef [ 759.545907] should_fail.cold+0xa/0xf [ 759.549729] ? lock_acquire+0x170/0x3c0 [ 759.553717] ? setup_fault_attr+0x200/0x200 [ 759.558060] __alloc_pages_nodemask+0x239/0x2890 [ 759.562836] ? kasan_kmalloc+0x139/0x160 [ 759.566909] ? __kmalloc_node+0x4c/0x70 23:52:13 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x200, 0x2, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x67, 0x0, 0xf4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x3, [0x7, 0x3, 0x7, 0x5d, 0xffffffff]}, @lsrr={0x83, 0x13, 0x92, [@multicast1, @empty, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x7, [{@loopback, 0x4}, {@loopback, 0x4}]}, @ssrr={0x89, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0x5, "de41fd"}, {0x0, 0x8, "1f4d66be1ff8"}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private=0xa010100, @remote, r1}, 0xc) (async, rerun: 64) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) [ 759.570892] ? kvmalloc_node+0x61/0xf0 [ 759.574787] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 759.579895] ? default_file_splice_read+0x191/0xa00 [ 759.581830] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 759.584918] ? do_splice_to+0x10e/0x160 [ 759.584936] ? do_sendfile+0x550/0xc30 [ 759.584954] ? perf_trace_lock+0xe2/0x4b0 [ 759.584973] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 759.610347] ? perf_trace_lock_acquire+0x530/0x530 [ 759.615292] ? mark_held_locks+0xa6/0xf0 23:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373706d00000000200002801c0001"], 0x64}}, 0x0) [ 759.619374] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 759.624496] ? should_fail+0x142/0x7b0 [ 759.628394] ? fs_reclaim_release+0xd0/0x110 [ 759.632819] ? setup_fault_attr+0x200/0x200 [ 759.637155] ? lock_acquire+0x170/0x3c0 [ 759.641140] ? check_preemption_disabled+0x41/0x280 [ 759.646170] ? __kmalloc_node+0x38/0x70 [ 759.650185] alloc_pages_current+0x193/0x2a0 [ 759.654613] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 759.659918] push_pipe+0x3e3/0x770 [ 759.663478] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 759.668427] ? iov_iter_bvec+0x130/0x130 [ 759.672506] ? lock_downgrade+0x720/0x720 [ 759.676675] ? iov_iter_pipe+0xb4/0x2c0 [ 759.680671] default_file_splice_read+0x191/0xa00 [ 759.683047] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 759.685534] ? do_splice_direct+0x270/0x270 [ 759.685552] ? aa_path_link+0x410/0x410 [ 759.685566] ? free_unref_page+0xe9/0x170 [ 759.685586] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 759.711164] ? __put_page+0xcc/0x3a0 [ 759.714896] ? generic_pipe_buf_release+0x1cc/0x240 [ 759.719925] ? __splice_from_pipe+0x19f/0x800 [ 759.724434] ? fsnotify+0x84e/0xe10 [ 759.728085] ? fsnotify_first_mark+0x200/0x200 [ 759.732686] ? default_file_splice_write+0x117/0x180 [ 759.737811] ? generic_splice_sendpage+0x140/0x140 [ 759.742764] ? security_file_permission+0x1c0/0x220 [ 759.747803] ? do_splice_direct+0x270/0x270 [ 759.752137] do_splice_to+0x10e/0x160 [ 759.755956] splice_direct_to_actor+0x2b9/0x8d0 [ 759.760652] ? generic_pipe_buf_nosteal+0x10/0x10 [ 759.765514] ? do_splice_to+0x160/0x160 [ 759.769515] do_splice_direct+0x1a7/0x270 [ 759.773689] ? splice_direct_to_actor+0x8d0/0x8d0 [ 759.778558] ? security_file_permission+0x1c0/0x220 [ 759.783602] do_sendfile+0x550/0xc30 [ 759.787343] ? do_compat_pwritev64+0x1b0/0x1b0 [ 759.791949] ? vfs_write+0x393/0x540 [ 759.795684] __se_sys_sendfile64+0x147/0x160 [ 759.800106] ? __se_sys_sendfile+0x180/0x180 [ 759.804571] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 759.809944] ? trace_hardirqs_off_caller+0x6e/0x210 [ 759.814974] ? do_syscall_64+0x21/0x620 [ 759.818950] do_syscall_64+0xf9/0x620 [ 759.822738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.827908] RIP: 0033:0x7fc948a630c9 [ 759.831604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.850486] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.858186] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 759.865440] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 759.872697] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.879964] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 759.887216] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 35) 23:52:14 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x200, 0x2, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x67, 0x0, 0xf4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x3, [0x7, 0x3, 0x7, 0x5d, 0xffffffff]}, @lsrr={0x83, 0x13, 0x92, [@multicast1, @empty, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x7, [{@loopback, 0x4}, {@loopback, 0x4}]}, @ssrr={0x89, 0x13, 0xd2, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0x5, "de41fd"}, {0x0, 0x8, "1f4d66be1ff8"}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private=0xa010100, @remote, r1}, 0xc) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) 23:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373736d00000000200002801c0001"], 0x64}}, 0x0) 23:52:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000e003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632a756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x60, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 760.311587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000f003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:14 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x945, 0x6, 0x4, 0x4, 0x47c, {r1, r2/1000+60000}, {0x2, 0x8, 0x20, 0x98, 0x8, 0x7f, "32af50d0"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0xffffff1d}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 23:52:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632b756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373786d00000000200002801c0001"], 0x64}}, 0x0) [ 760.370278] FAULT_INJECTION: forcing a failure. [ 760.370278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.443142] CPU: 1 PID: 18195 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 760.451045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 760.460404] Call Trace: [ 760.463011] dump_stack+0x1fc/0x2ef [ 760.466664] should_fail.cold+0xa/0xf [ 760.470482] ? lock_acquire+0x170/0x3c0 [ 760.474473] ? setup_fault_attr+0x200/0x200 [ 760.478818] __alloc_pages_nodemask+0x239/0x2890 [ 760.483590] ? kasan_kmalloc+0x139/0x160 [ 760.487666] ? __kmalloc_node+0x4c/0x70 [ 760.491649] ? kvmalloc_node+0x61/0xf0 [ 760.495550] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 760.500667] ? default_file_splice_read+0x191/0xa00 [ 760.505690] ? do_splice_to+0x10e/0x160 [ 760.509676] ? do_sendfile+0x550/0xc30 [ 760.513574] ? perf_trace_lock+0xe2/0x4b0 [ 760.517733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 760.522588] ? perf_trace_lock_acquire+0x530/0x530 [ 760.527530] ? mark_held_locks+0xa6/0xf0 [ 760.531608] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 760.536726] ? should_fail+0x142/0x7b0 [ 760.540621] ? fs_reclaim_release+0xd0/0x110 [ 760.545040] ? setup_fault_attr+0x200/0x200 [ 760.549371] ? lock_acquire+0x170/0x3c0 [ 760.553355] ? check_preemption_disabled+0x41/0x280 [ 760.558385] ? __kmalloc_node+0x38/0x70 [ 760.562376] alloc_pages_current+0x193/0x2a0 [ 760.566792] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 760.572076] push_pipe+0x3e3/0x770 [ 760.575636] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 760.580583] ? iov_iter_bvec+0x130/0x130 [ 760.584671] ? lock_downgrade+0x720/0x720 [ 760.588822] ? iov_iter_pipe+0xb4/0x2c0 23:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="646558003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640060003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 760.592806] default_file_splice_read+0x191/0xa00 [ 760.597669] ? do_splice_direct+0x270/0x270 [ 760.601997] ? aa_path_link+0x410/0x410 [ 760.605981] ? free_unref_page+0xe9/0x170 [ 760.610147] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 760.614743] ? __put_page+0xcc/0x3a0 [ 760.618474] ? generic_pipe_buf_release+0x1cc/0x240 [ 760.623508] ? __splice_from_pipe+0x19f/0x800 [ 760.628020] ? fsnotify+0x84e/0xe10 [ 760.631672] ? fsnotify_first_mark+0x200/0x200 [ 760.636272] ? default_file_splice_write+0x117/0x180 [ 760.641390] ? generic_splice_sendpage+0x140/0x140 [ 760.646334] ? security_file_permission+0x1c0/0x220 [ 760.651350] ? do_splice_direct+0x270/0x270 [ 760.655669] do_splice_to+0x10e/0x160 [ 760.659488] splice_direct_to_actor+0x2b9/0x8d0 [ 760.664149] ? generic_pipe_buf_nosteal+0x10/0x10 [ 760.668983] ? do_splice_to+0x160/0x160 [ 760.672948] do_splice_direct+0x1a7/0x270 [ 760.677083] ? splice_direct_to_actor+0x8d0/0x8d0 [ 760.681913] ? security_file_permission+0x1c0/0x220 [ 760.686917] do_sendfile+0x550/0xc30 [ 760.690633] ? do_compat_pwritev64+0x1b0/0x1b0 [ 760.695207] ? vfs_write+0x393/0x540 [ 760.698906] __se_sys_sendfile64+0x147/0x160 [ 760.703296] ? __se_sys_sendfile+0x180/0x180 [ 760.707688] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 760.713036] ? trace_hardirqs_off_caller+0x6e/0x210 [ 760.718037] ? do_syscall_64+0x21/0x620 [ 760.721994] do_syscall_64+0xf9/0x620 [ 760.725787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 760.730960] RIP: 0033:0x7fc948a630c9 [ 760.734655] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.753543] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.761234] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 760.768490] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 760.775741] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.782992] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 760.790260] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 36) 23:52:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="645865003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632d756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d02000000200002801c0001"], 0x64}}, 0x0) 23:52:14 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) clock_nanosleep(0x6, 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x945, 0x6, 0x4, 0x4, 0x47c, {r1, r2/1000+60000}, {0x2, 0x8, 0x20, 0x98, 0x8, 0x7f, "32af50d0"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0xffffff1d}) (async) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 23:52:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640081003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) (async) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@userptr={0x945, 0x6, 0x4, 0x4, 0x47c, {r1, r2/1000+60000}, {0x2, 0x8, 0x20, 0x98, 0x8, 0x7f, "32af50d0"}, 0x5, 0x2, {&(0x7f00000000c0)}, 0xffffff1d}) (async) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 23:52:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100632e756d00000000200002801c0001"], 0x64}}, 0x0) [ 761.264106] FAULT_INJECTION: forcing a failure. [ 761.264106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640a85003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 761.328711] CPU: 1 PID: 18247 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 761.336638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 761.346105] Call Trace: [ 761.348712] dump_stack+0x1fc/0x2ef [ 761.352363] should_fail.cold+0xa/0xf [ 761.356183] ? lock_acquire+0x170/0x3c0 [ 761.360174] ? setup_fault_attr+0x200/0x200 [ 761.364525] __alloc_pages_nodemask+0x239/0x2890 [ 761.369302] ? kasan_kmalloc+0x139/0x160 [ 761.373378] ? __kmalloc_node+0x4c/0x70 [ 761.377367] ? kvmalloc_node+0x61/0xf0 [ 761.381265] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 761.386384] ? default_file_splice_read+0x191/0xa00 [ 761.391423] ? do_splice_to+0x10e/0x160 [ 761.395418] ? do_sendfile+0x550/0xc30 [ 761.399323] ? perf_trace_lock+0xe2/0x4b0 [ 761.403492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 761.408369] ? perf_trace_lock_acquire+0x530/0x530 [ 761.413315] ? mark_held_locks+0xa6/0xf0 [ 761.417399] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 761.422524] ? should_fail+0x142/0x7b0 [ 761.426431] ? fs_reclaim_release+0xd0/0x110 [ 761.430863] ? setup_fault_attr+0x200/0x200 [ 761.435201] ? lock_acquire+0x170/0x3c0 [ 761.439198] ? check_preemption_disabled+0x41/0x280 [ 761.444233] ? __kmalloc_node+0x38/0x70 [ 761.448226] alloc_pages_current+0x193/0x2a0 [ 761.452648] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 761.457939] push_pipe+0x3e3/0x770 [ 761.461500] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 761.466451] ? iov_iter_bvec+0x130/0x130 [ 761.470531] ? lock_downgrade+0x720/0x720 [ 761.474686] ? iov_iter_pipe+0xb4/0x2c0 [ 761.478676] default_file_splice_read+0x191/0xa00 [ 761.483544] ? do_splice_direct+0x270/0x270 [ 761.487868] ? aa_path_link+0x410/0x410 [ 761.491851] ? free_unref_page+0xe9/0x170 [ 761.495994] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 761.500566] ? __put_page+0xcc/0x3a0 [ 761.504264] ? generic_pipe_buf_release+0x1cc/0x240 [ 761.509263] ? __splice_from_pipe+0x19f/0x800 [ 761.513742] ? fsnotify+0x84e/0xe10 [ 761.517357] ? fsnotify_first_mark+0x200/0x200 [ 761.521921] ? default_file_splice_write+0x117/0x180 [ 761.527006] ? generic_splice_sendpage+0x140/0x140 [ 761.531925] ? security_file_permission+0x1c0/0x220 [ 761.536929] ? do_splice_direct+0x270/0x270 [ 761.541240] do_splice_to+0x10e/0x160 [ 761.545036] splice_direct_to_actor+0x2b9/0x8d0 [ 761.549693] ? generic_pipe_buf_nosteal+0x10/0x10 [ 761.554537] ? do_splice_to+0x160/0x160 [ 761.558513] do_splice_direct+0x1a7/0x270 [ 761.562664] ? splice_direct_to_actor+0x8d0/0x8d0 [ 761.567497] ? security_file_permission+0x1c0/0x220 [ 761.572503] do_sendfile+0x550/0xc30 [ 761.576208] ? do_compat_pwritev64+0x1b0/0x1b0 [ 761.580774] ? vfs_write+0x393/0x540 [ 761.584473] __se_sys_sendfile64+0x147/0x160 [ 761.588873] ? __se_sys_sendfile+0x180/0x180 [ 761.593268] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 761.598618] ? trace_hardirqs_off_caller+0x6e/0x210 [ 761.603630] ? do_syscall_64+0x21/0x620 [ 761.607597] do_syscall_64+0xf9/0x620 [ 761.611409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 761.616604] RIP: 0033:0x7fc948a630c9 [ 761.620344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.639248] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.646956] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 761.654213] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 761.661478] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.668756] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 761.676020] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:15 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 37) 23:52:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400f0003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xeac, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006330756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d03000000200002801c0001"], 0x64}}, 0x0) 23:52:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4, 0x2, 0x3, "5587e6ebca464754af0aad7bd2b5bd79044e3fdcdc8c0441dfb461d2c39e660e", 0x31435750}) 23:52:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xec0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003200010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006358756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:16 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (rerun: 32) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80000) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4, 0x2, 0x3, "5587e6ebca464754af0aad7bd2b5bd79044e3fdcdc8c0441dfb461d2c39e660e", 0x31435750}) 23:52:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d04000000200002801c0001"], 0x64}}, 0x0) [ 762.246258] FAULT_INJECTION: forcing a failure. [ 762.246258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000006700010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 762.326853] CPU: 1 PID: 18286 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 762.334766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 762.344133] Call Trace: [ 762.346741] dump_stack+0x1fc/0x2ef [ 762.350397] should_fail.cold+0xa/0xf [ 762.354212] ? lock_acquire+0x170/0x3c0 [ 762.358203] ? setup_fault_attr+0x200/0x200 [ 762.362554] __alloc_pages_nodemask+0x239/0x2890 [ 762.367329] ? kasan_kmalloc+0x139/0x160 [ 762.371413] ? __kmalloc_node+0x4c/0x70 [ 762.375406] ? kvmalloc_node+0x61/0xf0 [ 762.379310] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 762.384528] ? default_file_splice_read+0x191/0xa00 [ 762.389560] ? do_splice_to+0x10e/0x160 [ 762.393553] ? do_sendfile+0x550/0xc30 [ 762.397460] ? perf_trace_lock+0xe2/0x4b0 [ 762.401637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 762.406501] ? perf_trace_lock_acquire+0x530/0x530 [ 762.411446] ? mark_held_locks+0xa6/0xf0 [ 762.415527] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 762.420651] ? should_fail+0x142/0x7b0 [ 762.424559] ? fs_reclaim_release+0xd0/0x110 [ 762.428989] ? setup_fault_attr+0x200/0x200 [ 762.433331] ? lock_acquire+0x170/0x3c0 [ 762.437322] ? check_preemption_disabled+0x41/0x280 [ 762.442361] ? __kmalloc_node+0x38/0x70 [ 762.446362] alloc_pages_current+0x193/0x2a0 [ 762.450788] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 762.456073] push_pipe+0x3e3/0x770 [ 762.459632] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 762.464587] ? iov_iter_bvec+0x130/0x130 [ 762.468652] ? lock_downgrade+0x720/0x720 [ 762.472785] ? iov_iter_pipe+0xb4/0x2c0 [ 762.476766] default_file_splice_read+0x191/0xa00 [ 762.481623] ? do_splice_direct+0x270/0x270 [ 762.485933] ? aa_path_link+0x410/0x410 [ 762.489914] ? free_unref_page+0xe9/0x170 [ 762.494058] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 762.498630] ? __put_page+0xcc/0x3a0 [ 762.502332] ? generic_pipe_buf_release+0x1cc/0x240 [ 762.507338] ? __splice_from_pipe+0x19f/0x800 [ 762.511816] ? fsnotify+0x84e/0xe10 [ 762.515432] ? fsnotify_first_mark+0x200/0x200 [ 762.520000] ? default_file_splice_write+0x117/0x180 [ 762.525085] ? generic_splice_sendpage+0x140/0x140 [ 762.530012] ? security_file_permission+0x1c0/0x220 [ 762.535041] ? do_splice_direct+0x270/0x270 [ 762.539375] do_splice_to+0x10e/0x160 [ 762.543166] splice_direct_to_actor+0x2b9/0x8d0 [ 762.547824] ? generic_pipe_buf_nosteal+0x10/0x10 [ 762.552711] ? do_splice_to+0x160/0x160 [ 762.556707] do_splice_direct+0x1a7/0x270 [ 762.560861] ? splice_direct_to_actor+0x8d0/0x8d0 [ 762.565710] ? security_file_permission+0x1c0/0x220 [ 762.570715] do_sendfile+0x550/0xc30 [ 762.574418] ? do_compat_pwritev64+0x1b0/0x1b0 [ 762.578988] ? vfs_write+0x393/0x540 [ 762.582689] __se_sys_sendfile64+0x147/0x160 [ 762.587106] ? __se_sys_sendfile+0x180/0x180 [ 762.591507] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 762.596860] ? trace_hardirqs_off_caller+0x6e/0x210 [ 762.601862] ? do_syscall_64+0x21/0x620 [ 762.605819] do_syscall_64+0xf9/0x620 [ 762.609606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.614779] RIP: 0033:0x7fc948a630c9 [ 762.618474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.637358] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 762.645060] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 762.652325] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 762.659614] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.666904] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 762.674157] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 38) 23:52:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640002003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006363756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d05000000200002801c0001"], 0x64}}, 0x0) 23:52:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:16 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80000) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4, 0x2, 0x3, "5587e6ebca464754af0aad7bd2b5bd79044e3fdcdc8c0441dfb461d2c39e660e", 0x31435750}) 23:52:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640003003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d06000000200002801c0001"], 0x64}}, 0x0) 23:52:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006364756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 763.165496] FAULT_INJECTION: forcing a failure. [ 763.165496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:52:17 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x9) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640004003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 763.245779] CPU: 1 PID: 18329 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 763.253684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 763.263057] Call Trace: [ 763.265662] dump_stack+0x1fc/0x2ef [ 763.269340] should_fail.cold+0xa/0xf [ 763.273161] ? lock_acquire+0x170/0x3c0 [ 763.277221] ? setup_fault_attr+0x200/0x200 [ 763.281691] __alloc_pages_nodemask+0x239/0x2890 [ 763.286463] ? kasan_kmalloc+0x139/0x160 [ 763.290540] ? __kmalloc_node+0x4c/0x70 [ 763.294531] ? kvmalloc_node+0x61/0xf0 [ 763.298438] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 763.303554] ? default_file_splice_read+0x191/0xa00 [ 763.308594] ? do_splice_to+0x10e/0x160 [ 763.312592] ? do_sendfile+0x550/0xc30 [ 763.316500] ? perf_trace_lock+0xe2/0x4b0 [ 763.320678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 763.325537] ? perf_trace_lock_acquire+0x530/0x530 [ 763.330482] ? mark_held_locks+0xa6/0xf0 [ 763.334569] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 763.339704] ? should_fail+0x142/0x7b0 [ 763.343601] ? fs_reclaim_release+0xd0/0x110 [ 763.348025] ? setup_fault_attr+0x200/0x200 [ 763.352359] ? lock_acquire+0x170/0x3c0 [ 763.356354] ? check_preemption_disabled+0x41/0x280 [ 763.361395] ? __kmalloc_node+0x38/0x70 [ 763.365395] alloc_pages_current+0x193/0x2a0 [ 763.369829] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 763.375131] push_pipe+0x3e3/0x770 [ 763.378705] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 763.383664] ? iov_iter_bvec+0x130/0x130 [ 763.387746] ? lock_downgrade+0x720/0x720 [ 763.391908] ? iov_iter_pipe+0xb4/0x2c0 [ 763.395911] default_file_splice_read+0x191/0xa00 [ 763.400780] ? do_splice_direct+0x270/0x270 [ 763.405114] ? aa_path_link+0x410/0x410 [ 763.409115] ? free_unref_page+0xe9/0x170 [ 763.413286] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 763.417886] ? __put_page+0xcc/0x3a0 [ 763.421618] ? generic_pipe_buf_release+0x1cc/0x240 [ 763.426650] ? __splice_from_pipe+0x19f/0x800 [ 763.431168] ? fsnotify+0x84e/0xe10 [ 763.434814] ? fsnotify_first_mark+0x200/0x200 [ 763.439416] ? default_file_splice_write+0x117/0x180 [ 763.444521] ? generic_splice_sendpage+0x140/0x140 [ 763.449464] ? security_file_permission+0x1c0/0x220 [ 763.454474] ? do_splice_direct+0x270/0x270 [ 763.458786] do_splice_to+0x10e/0x160 [ 763.462579] splice_direct_to_actor+0x2b9/0x8d0 [ 763.467242] ? generic_pipe_buf_nosteal+0x10/0x10 [ 763.472074] ? do_splice_to+0x160/0x160 [ 763.476040] do_splice_direct+0x1a7/0x270 [ 763.480177] ? splice_direct_to_actor+0x8d0/0x8d0 [ 763.485006] ? security_file_permission+0x1c0/0x220 [ 763.490032] do_sendfile+0x550/0xc30 [ 763.493768] ? do_compat_pwritev64+0x1b0/0x1b0 [ 763.498336] ? vfs_write+0x393/0x540 [ 763.502054] __se_sys_sendfile64+0x147/0x160 [ 763.506464] ? __se_sys_sendfile+0x180/0x180 [ 763.510859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 763.516209] ? trace_hardirqs_off_caller+0x6e/0x210 [ 763.521216] ? do_syscall_64+0x21/0x620 [ 763.525183] do_syscall_64+0xf9/0x620 [ 763.528977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.534156] RIP: 0033:0x7fc948a630c9 [ 763.537853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.556742] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 763.564436] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 763.571691] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 763.578957] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.586212] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 763.593463] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:17 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 39) 23:52:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640006003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006369756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xac0e, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:17 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x9) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d07000000200002801c0001"], 0x64}}, 0x0) 23:52:17 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x9) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xc00e, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640007003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 764.078737] nla_parse: 15 callbacks suppressed [ 764.078748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.115817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:17 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x10) fcntl$setlease(r1, 0x400, 0x0) lseek(r0, 0x1, 0x3) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x5}) 23:52:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100636c756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 764.129798] FAULT_INJECTION: forcing a failure. [ 764.129798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.192604] CPU: 1 PID: 18378 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 764.200529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 764.209904] Call Trace: [ 764.212513] dump_stack+0x1fc/0x2ef [ 764.216168] should_fail.cold+0xa/0xf [ 764.219984] ? lock_acquire+0x170/0x3c0 [ 764.223978] ? setup_fault_attr+0x200/0x200 [ 764.228340] __alloc_pages_nodemask+0x239/0x2890 [ 764.233120] ? kasan_kmalloc+0x139/0x160 [ 764.237209] ? __kmalloc_node+0x4c/0x70 [ 764.241206] ? kvmalloc_node+0x61/0xf0 [ 764.245111] ? iov_iter_get_pages_alloc+0x562/0x1150 [ 764.250233] ? default_file_splice_read+0x191/0xa00 [ 764.255270] ? do_splice_to+0x10e/0x160 [ 764.259259] ? do_sendfile+0x550/0xc30 [ 764.263164] ? perf_trace_lock+0xe2/0x4b0 [ 764.267329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 764.272189] ? perf_trace_lock_acquire+0x530/0x530 [ 764.277133] ? mark_held_locks+0xa6/0xf0 [ 764.281208] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 764.286330] ? should_fail+0x142/0x7b0 [ 764.290232] ? fs_reclaim_release+0xd0/0x110 [ 764.294654] ? setup_fault_attr+0x200/0x200 [ 764.298986] ? lock_acquire+0x170/0x3c0 [ 764.302981] ? check_preemption_disabled+0x41/0x280 [ 764.308009] ? __kmalloc_node+0x38/0x70 [ 764.311997] alloc_pages_current+0x193/0x2a0 [ 764.316418] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 764.321705] push_pipe+0x3e3/0x770 [ 764.325271] iov_iter_get_pages_alloc+0x5b1/0x1150 [ 764.330221] ? iov_iter_bvec+0x130/0x130 [ 764.334294] ? lock_downgrade+0x720/0x720 [ 764.335671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.338440] ? iov_iter_pipe+0xb4/0x2c0 [ 764.338462] default_file_splice_read+0x191/0xa00 [ 764.338486] ? do_splice_direct+0x270/0x270 [ 764.338500] ? aa_path_link+0x410/0x410 [ 764.338518] ? free_unref_page+0xe9/0x170 [ 764.368296] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 764.372895] ? __put_page+0xcc/0x3a0 [ 764.376627] ? generic_pipe_buf_release+0x1cc/0x240 [ 764.381664] ? __splice_from_pipe+0x19f/0x800 [ 764.386169] ? fsnotify+0x84e/0xe10 [ 764.389818] ? fsnotify_first_mark+0x200/0x200 [ 764.394418] ? default_file_splice_write+0x117/0x180 [ 764.399527] ? generic_splice_sendpage+0x140/0x140 [ 764.404449] ? security_file_permission+0x1c0/0x220 [ 764.409456] ? do_splice_direct+0x270/0x270 [ 764.413765] do_splice_to+0x10e/0x160 [ 764.417558] splice_direct_to_actor+0x2b9/0x8d0 [ 764.422213] ? generic_pipe_buf_nosteal+0x10/0x10 [ 764.427046] ? do_splice_to+0x160/0x160 [ 764.431015] do_splice_direct+0x1a7/0x270 [ 764.435158] ? splice_direct_to_actor+0x8d0/0x8d0 [ 764.439989] ? security_file_permission+0x1c0/0x220 [ 764.444994] do_sendfile+0x550/0xc30 [ 764.448716] ? do_compat_pwritev64+0x1b0/0x1b0 [ 764.453285] ? vfs_write+0x393/0x540 [ 764.457001] __se_sys_sendfile64+0x147/0x160 [ 764.461395] ? __se_sys_sendfile+0x180/0x180 [ 764.465824] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 764.471175] ? trace_hardirqs_off_caller+0x6e/0x210 [ 764.476175] ? do_syscall_64+0x21/0x620 [ 764.480158] do_syscall_64+0xf9/0x620 [ 764.483957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.489155] RIP: 0033:0x7fc948a630c9 [ 764.492874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.511916] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 764.519616] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 764.526880] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 764.534142] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.541424] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 764.548679] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 40) 23:52:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c00010009000100636f756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640008003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:18 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x10) fcntl$setlease(r1, 0x400, 0x0) lseek(r0, 0x1, 0x3) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x5}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x10) (async) fcntl$setlease(r1, 0x400, 0x0) (async) lseek(r0, 0x1, 0x3) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x5}) (async) 23:52:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x34000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d08000000200002801c0001"], 0x64}}, 0x0) [ 764.990870] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 765.006744] FAULT_INJECTION: forcing a failure. [ 765.006744] name failslab, interval 1, probability 0, space 0, times 0 [ 765.028607] CPU: 0 PID: 18417 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 765.036525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 765.045885] Call Trace: [ 765.048483] dump_stack+0x1fc/0x2ef [ 765.052131] should_fail.cold+0xa/0xf [ 765.055946] ? setup_fault_attr+0x200/0x200 [ 765.060286] ? lock_acquire+0x170/0x3c0 [ 765.061207] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 765.064274] __should_failslab+0x115/0x180 [ 765.064295] should_failslab+0x5/0x10 [ 765.064312] __kmalloc+0x2ab/0x3c0 [ 765.084469] ? rw_copy_check_uvector+0x2ca/0x340 [ 765.089244] rw_copy_check_uvector+0x2ca/0x340 [ 765.093866] ? mark_held_locks+0xa6/0xf0 [ 765.097946] import_iovec+0xa6/0x3a0 [ 765.101678] ? dup_iter+0x250/0x250 [ 765.105317] ? check_preemption_disabled+0x41/0x280 [ 765.110355] ? __kmalloc_node+0x38/0x70 [ 765.114336] vfs_readv+0xbb/0x150 [ 765.117795] ? compat_rw_copy_check_uvector+0x410/0x410 [ 765.123156] ? push_pipe+0x3fe/0x770 [ 765.126879] ? iov_iter_get_pages_alloc+0x339/0x1150 [ 765.132012] ? iov_iter_bvec+0x130/0x130 [ 765.136080] ? lock_downgrade+0x720/0x720 [ 765.140223] ? iov_iter_pipe+0xb4/0x2c0 [ 765.144206] default_file_splice_read+0x457/0xa00 [ 765.149051] ? do_splice_direct+0x270/0x270 [ 765.153355] ? aa_path_link+0x410/0x410 [ 765.157329] ? free_unref_page+0xe9/0x170 [ 765.161473] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 765.166056] ? __put_page+0xcc/0x3a0 [ 765.169775] ? generic_pipe_buf_release+0x1cc/0x240 [ 765.174790] ? security_file_permission+0x1c0/0x220 [ 765.179829] ? do_splice_direct+0x270/0x270 [ 765.184147] do_splice_to+0x10e/0x160 [ 765.187938] splice_direct_to_actor+0x2b9/0x8d0 [ 765.192624] ? generic_pipe_buf_nosteal+0x10/0x10 [ 765.197469] ? do_splice_to+0x160/0x160 [ 765.201446] do_splice_direct+0x1a7/0x270 [ 765.205588] ? splice_direct_to_actor+0x8d0/0x8d0 [ 765.210423] ? security_file_permission+0x1c0/0x220 [ 765.215431] do_sendfile+0x550/0xc30 [ 765.219168] ? do_compat_pwritev64+0x1b0/0x1b0 [ 765.223758] ? vfs_write+0x393/0x540 [ 765.227466] __se_sys_sendfile64+0x147/0x160 [ 765.231883] ? __se_sys_sendfile+0x180/0x180 [ 765.236316] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 765.241674] ? trace_hardirqs_off_caller+0x6e/0x210 [ 765.246682] ? do_syscall_64+0x21/0x620 [ 765.250672] do_syscall_64+0xf9/0x620 [ 765.254473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.259658] RIP: 0033:0x7fc948a630c9 [ 765.263363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.282262] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d09000000200002801c0001"], 0x64}}, 0x0) 23:52:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x400300, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006370756d00000000200002801c0001"], 0x64}}, 0x0) 23:52:19 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x10) fcntl$setlease(r1, 0x400, 0x0) lseek(r0, 0x1, 0x3) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x5}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x10) (async) fcntl$setlease(r1, 0x400, 0x0) (async) lseek(r0, 0x1, 0x3) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x5}) (async) 23:52:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000a003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 765.289959] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 765.297335] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 765.304634] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.311892] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 765.319159] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 41) 23:52:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 765.438353] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 765.474944] FAULT_INJECTION: forcing a failure. [ 765.474944] name failslab, interval 1, probability 0, space 0, times 0 23:52:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000c003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23090000010000086ed0010000000500070000000000080009f0ffffff00060002000100000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB="72866c212a2d1d9d88e5d706018b2bf897fa3b6d8ab66e92353fcffb19eb575b7ec71c78d4a9a29c87681e46b1f38ab6392ad9e69ca0aafd8c1ee9ef6731187f4ad11932c32c2944f8e4d20ef4af6440f76086118472bf5faf622ee588c958fe31a0158fb393af65ac6553df540945871f36f1459682bc1ee7a7eb02de1e595fc250f29fba2884e6cbaa0b36da28e104546cb6bf5f573b49c1ffd62de8d68fdeac674d2ab61161557a6a20838f78437b53dd5e54181495707c"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) r6 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r6, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) syz_open_procfs(r6, &(0x7f00000000c0)='net/arp\x00') r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1b8, 0x150, 0x150, 0x1b8, 0x0, 0x2d0, 0x238, 0x238, 0x2d0, 0x238, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth0_to_bridge\x00', 'ip6gre0\x00', {}, {}, 0x84}, 0x0, 0x150, 0x1b8, 0x2e, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x6}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'ip6erspan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006375756d00000000200002801c0001"], 0x64}}, 0x0) [ 765.481199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000e003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0a000000200002801c0001"], 0x64}}, 0x0) [ 765.554102] CPU: 1 PID: 18442 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 765.562027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 765.571389] Call Trace: [ 765.573992] dump_stack+0x1fc/0x2ef [ 765.577634] should_fail.cold+0xa/0xf [ 765.581462] ? setup_fault_attr+0x200/0x200 [ 765.585799] ? lock_acquire+0x170/0x3c0 [ 765.589798] __should_failslab+0x115/0x180 [ 765.594046] should_failslab+0x5/0x10 [ 765.597860] kmem_cache_alloc_node_trace+0x244/0x3b0 23:52:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000f003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 765.602981] __kmalloc_node+0x38/0x70 [ 765.606798] kvmalloc_node+0xb4/0xf0 [ 765.610532] seq_read+0x408/0x11c0 [ 765.614101] ? seq_hex_dump+0x450/0x450 [ 765.618091] proc_reg_read+0x1bd/0x2d0 [ 765.622008] ? proc_reg_unlocked_ioctl+0x2c0/0x2c0 [ 765.626961] do_iter_read+0x471/0x630 [ 765.630790] vfs_readv+0xe5/0x150 [ 765.634260] ? compat_rw_copy_check_uvector+0x410/0x410 [ 765.636862] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 765.639632] ? push_pipe+0x3fe/0x770 [ 765.639654] ? iov_iter_get_pages_alloc+0x339/0x1150 [ 765.639675] ? iov_iter_bvec+0x130/0x130 [ 765.639695] ? lock_downgrade+0x720/0x720 [ 765.639707] ? iov_iter_pipe+0xb4/0x2c0 [ 765.639726] default_file_splice_read+0x457/0xa00 [ 765.639751] ? do_splice_direct+0x270/0x270 [ 765.639765] ? aa_path_link+0x410/0x410 [ 765.639781] ? free_unref_page+0xe9/0x170 [ 765.639799] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 765.639813] ? __put_page+0xcc/0x3a0 [ 765.639830] ? generic_pipe_buf_release+0x1cc/0x240 [ 765.639873] ? security_file_permission+0x1c0/0x220 [ 765.639893] ? do_splice_direct+0x270/0x270 [ 765.639911] do_splice_to+0x10e/0x160 [ 765.639931] splice_direct_to_actor+0x2b9/0x8d0 [ 765.639953] ? generic_pipe_buf_nosteal+0x10/0x10 [ 765.639975] ? do_splice_to+0x160/0x160 [ 765.640001] do_splice_direct+0x1a7/0x270 [ 765.640019] ? splice_direct_to_actor+0x8d0/0x8d0 [ 765.640040] ? security_file_permission+0x1c0/0x220 [ 765.640064] do_sendfile+0x550/0xc30 [ 765.640090] ? do_compat_pwritev64+0x1b0/0x1b0 [ 765.640109] ? vfs_write+0x393/0x540 [ 765.640130] __se_sys_sendfile64+0x147/0x160 [ 765.640145] ? __se_sys_sendfile+0x180/0x180 [ 765.640162] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 765.640180] ? trace_hardirqs_off_caller+0x6e/0x210 [ 765.640195] ? do_syscall_64+0x21/0x620 [ 765.640213] do_syscall_64+0xf9/0x620 [ 765.640233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.640245] RIP: 0033:0x7fc948a630c9 [ 765.640260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.640267] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 765.640281] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 765.640289] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 765.640298] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.640306] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 23:52:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006378756d00000000200002801c0001"], 0x64}}, 0x0) [ 765.640315] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 [ 765.862778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0b000000200002801c0001"], 0x64}}, 0x0) [ 766.009742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.055728] xt_CT: No such helper "snmp" 23:52:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 42) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640010003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 766.309703] FAULT_INJECTION: forcing a failure. [ 766.309703] name failslab, interval 1, probability 0, space 0, times 0 [ 766.321536] CPU: 0 PID: 18493 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 766.329440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 766.338803] Call Trace: [ 766.341410] dump_stack+0x1fc/0x2ef [ 766.345060] should_fail.cold+0xa/0xf [ 766.348878] ? setup_fault_attr+0x200/0x200 [ 766.353211] ? lock_acquire+0x170/0x3c0 [ 766.357204] __should_failslab+0x115/0x180 [ 766.361454] should_failslab+0x5/0x10 [ 766.365254] __kmalloc+0x2ab/0x3c0 [ 766.368794] ? tty_write+0x59e/0x810 [ 766.372504] ? tty_write+0x24e/0x810 [ 766.376245] tty_write+0x59e/0x810 [ 766.379776] ? check_preemption_disabled+0x41/0x280 [ 766.384778] ? n_tty_open+0x160/0x160 [ 766.388584] __vfs_write+0xf7/0x770 [ 766.392222] ? tty_compat_ioctl+0x270/0x270 [ 766.396559] ? kernel_read+0x110/0x110 [ 766.400470] ? generic_pipe_buf_release+0x1cc/0x240 [ 766.405487] ? iov_iter_advance+0x7d5/0xdb0 [ 766.409823] ? default_file_splice_read+0x814/0xa00 [ 766.414847] __kernel_write+0x109/0x370 [ 766.418814] write_pipe_buf+0x153/0x1f0 [ 766.422777] ? default_file_splice_read+0xa00/0xa00 [ 766.427791] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 766.433170] __splice_from_pipe+0x389/0x800 [ 766.437482] ? default_file_splice_read+0xa00/0xa00 [ 766.442486] default_file_splice_write+0xd8/0x180 [ 766.447321] ? generic_splice_sendpage+0x140/0x140 [ 766.452248] ? security_file_permission+0x1c0/0x220 [ 766.457271] ? generic_splice_sendpage+0x140/0x140 [ 766.462186] direct_splice_actor+0x115/0x160 [ 766.466578] splice_direct_to_actor+0x33f/0x8d0 [ 766.471245] ? generic_pipe_buf_nosteal+0x10/0x10 [ 766.476076] ? do_splice_to+0x160/0x160 [ 766.480151] do_splice_direct+0x1a7/0x270 [ 766.484297] ? splice_direct_to_actor+0x8d0/0x8d0 [ 766.489168] ? security_file_permission+0x1c0/0x220 [ 766.494195] do_sendfile+0x550/0xc30 [ 766.497908] ? do_compat_pwritev64+0x1b0/0x1b0 [ 766.502476] ? vfs_write+0x393/0x540 [ 766.506190] __se_sys_sendfile64+0x147/0x160 [ 766.510596] ? __se_sys_sendfile+0x180/0x180 [ 766.515004] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 766.520358] ? trace_hardirqs_off_caller+0x6e/0x210 [ 766.525359] ? do_syscall_64+0x21/0x620 [ 766.529330] do_syscall_64+0xf9/0x620 [ 766.533129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.538313] RIP: 0033:0x7fc948a630c9 [ 766.542009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:52:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23090000010000086ed0010000000500070000000000080009f0ffffff00060002000100000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB="72866c212a2d1d9d88e5d706018b2bf897fa3b6d8ab66e92353fcffb19eb575b7ec71c78d4a9a29c87681e46b1f38ab6392ad9e69ca0aafd8c1ee9ef6731187f4ad11932c32c2944f8e4d20ef4af6440f76086118472bf5faf622ee588c958fe31a0158fb393af65ac6553df540945871f36f1459682bc1ee7a7eb02de1e595fc250f29fba2884e6cbaa0b36da28e104546cb6bf5f573b49c1ffd62de8d68fdeac674d2ab61161557a6a20838f78437b53dd5e54181495707c"], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) (async) r6 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r6, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) (async) syz_open_procfs(r6, &(0x7f00000000c0)='net/arp\x00') r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1b8, 0x150, 0x150, 0x1b8, 0x0, 0x2d0, 0x238, 0x238, 0x2d0, 0x238, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth0_to_bridge\x00', 'ip6gre0\x00', {}, {}, 0x84}, 0x0, 0x150, 0x1b8, 0x2e, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x6}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'ip6erspan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0c000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063730a6d00000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640060003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 766.560929] RSP: 002b:00007fc946fd5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 766.568633] RAX: ffffffffffffffda RBX: 00007fc948b82f80 RCX: 00007fc948a630c9 [ 766.575896] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 766.583171] RBP: 00007fc946fd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.590438] R10: 0000020000000005 R11: 0000000000000246 R12: 0000000000000002 [ 766.597702] R13: 00007ffd946e2a6f R14: 00007fc946fd5300 R15: 0000000000022000 23:52:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) (fail_nth: 43) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400f0003100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0e000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000033100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373256d00000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 766.897125] xt_CT: No such helper "snmp" 23:52:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23090000010000086ed0010000000500070000000000080009f0ffffff00060002000100000008000a000000000008001700", @ANYRES32=r2, @ANYBLOB="72866c212a2d1d9d88e5d706018b2bf897fa3b6d8ab66e92353fcffb19eb575b7ec71c78d4a9a29c87681e46b1f38ab6392ad9e69ca0aafd8c1ee9ef6731187f4ad11932c32c2944f8e4d20ef4af6440f76086118472bf5faf622ee588c958fe31a0158fb393af65ac6553df540945871f36f1459682bc1ee7a7eb02de1e595fc250f29fba2884e6cbaa0b36da28e104546cb6bf5f573b49c1ffd62de8d68fdeac674d2ab61161557a6a20838f78437b53dd5e54181495707c"], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) (async) r6 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r6, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) syz_open_procfs(r6, &(0x7f00000000c0)='net/arp\x00') (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1b8, 0x150, 0x150, 0x1b8, 0x0, 0x2d0, 0x238, 0x238, 0x2d0, 0x238, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth0_to_bridge\x00', 'ip6gre0\x00', {}, {}, 0x84}, 0x0, 0x150, 0x1b8, 0x2e, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x6}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'ip6erspan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000063100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373586d00000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0f000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 23:52:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373636d00000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d10000000200002801c0001"], 0x64}}, 0x0) 23:52:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000073100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373646d00000000200002801c0001"], 0x64}}, 0x0) [ 767.390932] xt_CT: No such helper "snmp" 23:52:21 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r0}, 0x0, 0x4, @unused=[0x7, 0x6, 0x3, 0x5], @subvolid=0x1}) 23:52:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000a3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d48000000200002801c0001"], 0x64}}, 0x0) 23:52:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373696d00000000200002801c0001"], 0x64}}, 0x0) 23:52:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000002) 23:52:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400850a3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xac0e0000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063736c6d00000000200002801c0001"], 0x64}}, 0x0) 23:52:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000c3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d4c000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r0}, 0x0, 0x4, @unused=[0x7, 0x6, 0x3, 0x5], @subvolid=0x1}) 23:52:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xc00e0000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000e3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c0001000900010063736f6d00000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d60000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r0}, 0x0, 0x4, @unused=[0x7, 0x6, 0x3, 0x5], @subvolid=0x1}) 23:52:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000003) 23:52:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000f3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d68000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x44000, 0xa4) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x0, 0xc, 0x1, "e8df57411ff07e7d11c409b1a17d0d33fa34962c242a43e0fd4ae2028a99ce8c", 0x56595559}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) creat(&(0x7f0000000100)='./file0\x00', 0x14a) 23:52:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373706d00000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640065583100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373736d00000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d6c000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x44000, 0xa4) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x0, 0xc, 0x1, "e8df57411ff07e7d11c409b1a17d0d33fa34962c242a43e0fd4ae2028a99ce8c", 0x56595559}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) creat(&(0x7f0000000100)='./file0\x00', 0x14a) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x44000, 0xa4) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x0, 0xc, 0x1, "e8df57411ff07e7d11c409b1a17d0d33fa34962c242a43e0fd4ae2028a99ce8c", 0x56595559}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) creat(&(0x7f0000000100)='./file0\x00', 0x14a) (async) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000603100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 768.835790] audit: type=1804 audit(1674604342.594:3263): pid=18667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/653/file0" dev="sda1" ino=15285 res=1 [ 768.890240] audit: type=1800 audit(1674604342.634:3264): pid=18667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15285 res=0 [ 768.918149] audit: type=1804 audit(1674604342.634:3265): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/653/file0" dev="sda1" ino=15285 res=1 23:52:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373786d00000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d74000000200002801c0001"], 0x64}}, 0x0) 23:52:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000004) 23:52:22 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x44000, 0xa4) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x0, 0xc, 0x1, "e8df57411ff07e7d11c409b1a17d0d33fa34962c242a43e0fd4ae2028a99ce8c", 0x56595559}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) creat(&(0x7f0000000100)='./file0\x00', 0x14a) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x44000, 0xa4) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x0, 0xc, 0x1, "e8df57411ff07e7d11c409b1a17d0d33fa34962c242a43e0fd4ae2028a99ce8c", 0x56595559}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) creat(&(0x7f0000000100)='./file0\x00', 0x14a) (async) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640058653100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000813100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 769.193462] nla_parse: 20 callbacks suppressed [ 769.193473] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x0, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8000000, 0x6, 0x1}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x3b1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8001, [0x4, 0x2, 0x3, 0x3, 0x200, 0x2, 0x8, 0x1, 0x1, 0x6, 0x7ff, 0x7ff, 0x3f, 0x81, 0x5, 0x8000, 0x7ef, 0x101, 0x3, 0x1, 0x7ff, 0xfffc, 0x8, 0xbd3c, 0x800, 0x5, 0xe18, 0x0, 0x5, 0xfc01, 0x9, 0xfff7, 0x6, 0x8, 0x7, 0x7ff, 0xae, 0x9, 0x868, 0x6, 0x4, 0x6, 0x800, 0x2, 0x9, 0x3, 0x101, 0xfffd], 0x6}) 23:52:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000a853100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 769.251166] audit: type=1804 audit(1674604343.014:3266): pid=18691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/654/file0" dev="sda1" ino=15288 res=1 [ 769.279667] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d02000000200002801c0001"], 0x64}}, 0x0) [ 769.329392] audit: type=1800 audit(1674604343.044:3267): pid=18691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15288 res=0 23:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d7a000000200002801c0001"], 0x64}}, 0x0) 23:52:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x0, 0x990001}) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8000000, 0x6, 0x1}) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x3b1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8001, [0x4, 0x2, 0x3, 0x3, 0x200, 0x2, 0x8, 0x1, 0x1, 0x6, 0x7ff, 0x7ff, 0x3f, 0x81, 0x5, 0x8000, 0x7ef, 0x101, 0x3, 0x1, 0x7ff, 0xfffc, 0x8, 0xbd3c, 0x800, 0x5, 0xe18, 0x0, 0x5, 0xfc01, 0x9, 0xfff7, 0x6, 0x8, 0x7, 0x7ff, 0xae, 0x9, 0x868, 0x6, 0x4, 0x6, 0x800, 0x2, 0x9, 0x3, 0x101, 0xfffd], 0x6}) [ 769.435708] audit: type=1804 audit(1674604343.044:3268): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1286327301/syzkaller.QTOkT1/654/file0" dev="sda1" ino=15288 res=1 [ 769.438531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000f03100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 769.489701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:23 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000006) 23:52:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d03000000200002801c0001"], 0x64}}, 0x0) 23:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0000000200002801c0001"], 0x64}}, 0x0) 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x0, 0x990001}) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8000000, 0x6, 0x1}) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)=0x3b1) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8001, [0x4, 0x2, 0x3, 0x3, 0x200, 0x2, 0x8, 0x1, 0x1, 0x6, 0x7ff, 0x7ff, 0x3f, 0x81, 0x5, 0x8000, 0x7ef, 0x101, 0x3, 0x1, 0x7ff, 0xfffc, 0x8, 0xbd3c, 0x800, 0x5, 0xe18, 0x0, 0x5, 0xfc01, 0x9, 0xfff7, 0x6, 0x8, 0x7, 0x7ff, 0xae, 0x9, 0x868, 0x6, 0x4, 0x6, 0x800, 0x2, 0x9, 0x3, 0x101, 0xfffd], 0x6}) 23:52:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000f00010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 769.725600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x8, 0x3, "b0f685fd8b931d19e71686b448e3c75a3f9405ea07c533588d8af5b858cf1c93", 0x32314742}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d04000000200002801c0001"], 0x64}}, 0x0) 23:52:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 769.786296] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x8, 0x3, "b0f685fd8b931d19e71686b448e3c75a3f9405ea07c533588d8af5b858cf1c93", 0x32314742}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x8, 0x3, "b0f685fd8b931d19e71686b448e3c75a3f9405ea07c533588d8af5b858cf1c93", 0x32314742}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) 23:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d5e020000200002801c0001"], 0x64}}, 0x0) [ 769.909829] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.948068] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.013721] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:23 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000007) 23:52:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000023100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d05000000200002801c0001"], 0x64}}, 0x0) 23:52:23 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x8, 0x3, "b0f685fd8b931d19e71686b448e3c75a3f9405ea07c533588d8af5b858cf1c93", 0x32314742}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0020000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:24 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0xed9, 0x9, "7aa8e71c62b37113c724228d0a377279287db7f9ca14fe54aa66abd9d84b297d", 0x200, 0x10001, 0x6, 0x6, 0x8}) 23:52:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000033100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 770.291903] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00030000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d06000000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000008) 23:52:24 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0xed9, 0x9, "7aa8e71c62b37113c724228d0a377279287db7f9ca14fe54aa66abd9d84b297d", 0x200, 0x10001, 0x6, 0x6, 0x8}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0xed9, 0x9, "7aa8e71c62b37113c724228d0a377279287db7f9ca14fe54aa66abd9d84b297d", 0x200, 0x10001, 0x6, 0x6, 0x8}) (async) 23:52:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000043100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00050000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d07000000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000063100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00060000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d08000000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0xed9, 0x9, "7aa8e71c62b37113c724228d0a377279287db7f9ca14fe54aa66abd9d84b297d", 0x200, 0x10001, 0x6, 0x6, 0x8}) 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d09000000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000073100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:24 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 23:52:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00070000200002801c0001"], 0x64}}, 0x0) 23:52:24 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000009) 23:52:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000083100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00090000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0a000000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 23:52:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:25 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 23:52:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000a0000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000a3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0b000000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000a) 23:52:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000c3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0c000000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000b0000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00)={0x9, @remote}, &(0x7f0000000a40)=0x12, 0x80800) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'x'}, {}, {0x20, '/\x06\x00v/video37\x00'}, {0x20, '/dev/video37\x00'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, '%-\xd4\xe73\x06\x9d\x8d%uK\xea0\xcb\x9f\xfe\xbfQ\xectj$\xbc\xc3[\x85\xdbxU|9\xe6G\xc1N\xe8\xe7\xa2\xdd\x91\x8f\x87L\xfe'}], 0xa, "4a694ceaf539ccdbe24577f9749a4b01ff22f6c046e11d4c5a9e1b"}, 0x76) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x5, 0x1, "5c4bb05a2b9fc840a3ddd47d15aa35ffc6ab0d4bff8cf57ed99741e11b96bcf1", 0x20363059}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x1, 0x401, 0x960, 0xfffeffff, 0x1}) r2 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x1a0755cd, 0x7, 0x0, "9b5302cfd8025f08f75bfadb71aec52ac558844c3795c432e9c5e0f0dc0bcc8a", 0x32314d54}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, '\x00', &(0x7f0000000140)=0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c001e1a8a63b8d5ba242700000000", @ANYRES32=0x0, @ANYBLOB="00000081000000000b00000009000100666c6f77000000001c000200080002000100000008000100eef90100080003000b000200"], 0x4c}}, 0x0) r3 = signalfd4(r2, &(0x7f0000001d40)={[0x2]}, 0x8, 0x80800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000000fc0)=""/101, 0x65, 0x0, &(0x7f0000001040)=""/79, 0x4f}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40286608, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x24, &(0x7f0000000f00)=""/36, 0x41100, 0x0, '\x00', 0x0, 0x21, r4, 0x8, &(0x7f0000000f40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x1, 0x3, 0x3ff}, 0x10, r5, r6}, 0x80) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x1b, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000098cb000000000000ff03000018000000010000000000000002000000673900010800000018160000", @ANYRES32, @ANYBLOB="00008000000000009500000000000000"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0xed, &(0x7f0000001c40)=""/237, 0xc1100, 0x5, '\x00', 0x0, 0x26, r3, 0x8, &(0x7f0000001d80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0xa, 0xa92, 0xfff}, 0x10, r5, r2, 0x0, &(0x7f0000001e00)=[r2, r7, r8, r2, r2, r2, r2, r2, r9]}, 0x80) r10 = accept4$nfc_llcp(r2, &(0x7f0000000b00), &(0x7f0000000b80)=0x60, 0x80800) write(r10, &(0x7f0000000bc0)="7b5f600ab8e61784d45499883fc421757c7fb9462bf9e8a911bfde22842c21530e2035386ac92b09eda958d0bbf5f930d3258c49e37255af1200310826e6c922d0f5039c9e593bc0d9300f813a71cc8d26947044d1b0155d50be88dfb59aedc2b33f2c8573f231e3647ed15b2d2921c910c4eeedc282e1b7de5b218b419b54ebdfda8941377a7cfa06ac41fc5fbedf776f8fbd7c6ac86625d67d5e895801f73fa1312e72d4bde5960dc17015ae9497055b7cc799bc29432f3aecfab08fe33ae3fae5029d092f1444c2a1cc024c8d7cbb13aaefc7cab6e28618443da482e64b8df4a1d05787c239e3178fa4d9c7005f8e6f046656461c16aa3274fa2c401e0d28a469fa0737a1ca73ae3b8aa7f0b2852afc1b1d792388d537fe35ac34dc4194fa77db87b0a225d45a58d7eaa37b097859e9d3521ffd4aba0815ba33c0ae39f5ff5e297f3f78cc0874721c7b0afd5fd20f33744ca2f2890b06154769096cfef6c548e12c4b1392aa4e872960eca6c914070de4e3c258f055e583dc6aaac121017ecbfbd5c01ed56e45192487ffc36824fcc9e3ba9f2add73085d3278e576b53b3d9b86051dafa19e7dc699d0450506ed1249999ae9313ff9e6b06e24853822faf5487066fe51f591c727fca38e8893e0839c8e198395577194a676f8af74c50aef8eab8f7752d7f6a75e21b6cda034bb1c5eae477e57f0164954821d73b80fc28090e7403b6eee152e97b9a9989a318fccab03edbac1acd740e465d7bdf70bfdef77e6115745ff6a1baef7a94680dd41b7f1382168cdee807275d23a0fcfc789787eb917e5bba902c45f88584d9bf0907c0105efaea916221d314dae6d0291274e6e937e0489090edf5aaed0a8ce8d73724502275744fb3cbc0e654be419c71c2327431d4d8c84f9438edcac269fba52d5a45744b832748481464a2dade58c8af5f1cd8059f8659e4d386db3b357424261d20bcad6cdc5ffee3c4e7986dff3c8a151761e0edc63235e6582ca51af59eb0bb9375d298132ad70234888e42adc7fbf5e26d050fe11517841e772576d543c7a7f4b27fa40b8fdcc25bdab0ece97735c4d8d201c3c3d86230ac497cb0850141efd5781fc65b11e4f1a916a397bd4158ab2ada0f7e9d5f099e1b067234b74c7109966addc0e2885825fec9c2c2ccb6b3558c190a92b06d1970219ac020f2e56f97de5105e01d15334395ab4986ca81934e5fb0d274f7389d058bbf49e2087bc246a8b0ca18d5f410c1407e3acea6287eb4eccb2c97d18559493f809c7ee922006f679631a98468d0efec29c5b5f94bab0fe2397bd853be8f79dc1552a0db89bbd693e7072e2036cb394a17620b14d088b43fe57dd68781486189c3b1f4ff4fad686353877fe3148a73acf2c8b73b1d8b7068ef77cfef077c694ab474b4c4fd849a218c5fa2e7119aeabbacde90ca892d8008468d79cde36c366f602b115bca9bdf5e876525b362337922e4acfed02455c8e6356d2f2f779454bbe20f2cd5b58b218cc31364e5b6a970fda5fdce9556355bb29deffb404d0e3a316b93d60e7e7c9e3a040e79a4150251a1f8d6511d2afe6e1be217e4d17ffebeee3f24fcafb75c537d3b5cfd326b46d353079ecaa1d76330a7be352a0f77af004be4d63892b1979236f3580b7fd8bca66cd07d98e770a9ec00e5e1ec49b0bed975610384cf011bbb6eed141d3a7591a444c2f57bc34060a51e843f97bf0e2c762654a45ad25c04d8d6a559bd9a43422ec648154e76c172119a382c5fbf875d783e7f6cc45c5867c0f4a472af08371bd11c2592dd8d745ca162371bd60ccbf521c5f6d242c4e0a64e4cb5a369c9bcd7212df7ce2a4de5dfb3314f653b57f9589b95c80fa29d90eff93ec8cd704a0679d8ed3a24bce4c1bb6d8e81c2f47a0d4ac7e8231cc3026d0e3a1e2231fb8b1d0f5a14e2487d4d444355704bc7d2421655aeab1ea95b526f0ac3e63bb872f6b661a7d581d6e24df852872d8ca9ea4c4c0961e9c53c460712d109ab858f17b2579dadca1ea7a2ef561723ab419608789958de413cf1708e4718884d06d60ef17cf44474cef7ce06624f6b6c31621b45d77b2d639ea4fdf785870965e8ad058bdfdf7ce451135a735110e1a4034d2b42e38c71bf62b6fe608720e9b7dbe1b0b8907739920435661007585a0a607cc66d97a0f7f66ed66e67495af08879554c1cc7f54f4937f1f7135da4d623ba8c3aeb122e50e4dffccd79eb4e4306c8bf584fe26cf59e6e8f3ab0191148e8b688bc87c66fc48d51fef9aa795becf9ee34aa1614f7f664c6b3e75c2fed06809babffeee7537eca4ff3a447e913a1dce5618b34858f7893580d798fb837f0f9435ad7ea9b0b2d89d4aeaca7c919ef4a30f19fa0f5bcf707e783d1ac4c7e93979b70cf54b091cf096de4b6216bf44127b9bb3a2d7afafac7178e1e9b7ca5346a54eba77ef03bd28399bba78562b5cc96c92ea4869cbace24f26956d56ac63ec79b02bc7d3ad02b51ca99b61c1ae357e4fc0ebd040f99f9523d0b9e7f1a7321dfa9b82b616769fcaaa58904672bb2c7371e7db73bff3bf5bafbea99bec7ee6974b801145a394e2b93fd82d45328267b7b7d78268e2d30f4990a2e738efc0ce87b33187eefad5a9b74fb22db9317ea05fd5b5580e393a78bfa103f8c7e071ace1415b431660b46bded470978c7f26e39bc23f575bcb6087166987a318a179c44e14210c9748d111540a2faab1a6fa176b9c6c3a4de6473f867be91936e5336a8610d356b9cebbda51a14ba963eaa868cc5c9870bec640ab6b151db31fa64b1648cef8bfd407319a6096072e07da6308b6012c7e26de09801645a8bf9afe7e9e35940a37ae08ffe949361486079b66461b456a2b5040ad89a3a096d791c234e9e997b0477565cddeb2653ad89d597a2b038a5a8b9a865bbdebb92639f66b6972ef8a939c38eb71caf846fe9d22f45d1444221bd9ce439a6228ca75806256419da7ec8a8bb1a0aaef0674ff88efabfd5c4b46ce3c10f56e6fcafba6142d2fb61e4666a21b318848b9deac07e96c5c8f7a3376961c1096b4a8fe5ef4e2cc66cd881e4486ee087eb06fd416355e42cd85a931da09a60abe182af73cfedaab42ba88a2d32734b7b4e38f14a66b84c1cca303086a5b74b8084e2226bddfc16b61ba1072861c965e33fd2d4f6a506231b0e169e49fe7ac082cffbbcfe16e9f298b59739decafaa28d791e21d602f723c2b9c724244ad05470ad76f68c2732e4bce849fc0d3525f775a5d9e1f82ebf8ed50074664844b521f24147a502b47248f67acc0d05145d27a9d4483f786749f8f22c833de8274db050398541a1edb6bf4ce574a8df54de2ad7b454f7ed166d741118bbfed68d85bcbaa403f12d62de77a96de1a56e7c9855386943819228bec87e95b2a902e4216db2547a3689d55a2d6eb4327c5b487dbc0a4796de7d68b39144fce8540f6c6eed1dc8df9ff77fd6d4d029c0d5c6262f8a0e067d07aaa6ab70b29e2195e582c366ef12ca231189e32643378844564ad72d46c742df797556c41924556d3b2dd7861bfba1496d60e6803aa75307d05ab7ef5d93e54c5ff8b1f4524a2c40f0927fd916f16185d077a655870962382159b67d302e52911b46bd718f43751fc58431025b706c8b43d350a9f396750155c441f5a50be7510575a4ffef37062c2fcd06bb0831d5ac89f460e9d0dc0fdc7e9ba22e304ede18a2ea5e2065a157290f8219e235b05e9ef14a8f79a75fb75579daf4dc09989f3a54dafcb40f4c1e1a5b172630cae447ff2405b8258f05b4bb423ca7a014cf040ea673b779734008749e08e561e5b07a1385d56ee9055ed7571cb81778f7bcb936effffec194b5fe8542b9f72ed0e4f32cb20be98e6c248298001745ebeb6ab0b4e39020b8ef3adacfbdb81be098915728beb7922d30e1b639b59a0e6f6122f8f2acc3450368954a60a87acb63c0e043591c3da376100ad4498373edeb175fe2bbec88b3b32fb739f8dde89537022250ce7f175d739d304a9d819eea24423e5553304a067bb80a24ceffc094c4c5a0c8e577ff783da58660d4e71a7f84341653bbbf712823a397f024275ee012dbb7456a4fe5df1b18bf9d546e25798f980f9256cdb0d9648a1bc5ffaa3f0ce71d513d91fec713e32ecb59133ea83ec0150323b0666dfeaa420233ace28fed07e99a10a5fc5d32f46ee7f8e7d97c33bd164ab86729e3498ff1c15dade49264d22cfbbde6a9be67a82f766b5cf1db1f3f982476954570d468242ecd857c2184f84065a14a8a4dcd9f6d11b726083b7426382f6fd4917258d72a2945b59624871c2830c2e06283a8253d397b1086c7f4c97a4de7ee0fb7be561441a0c9dc56dacd0de1730445dfaef6eaa80b8033b505ec0e4501ca33c5eb6697e29d85cb6915062fe377c2b426da31231b020529b7bfe268aaed18de39e3da87c1c7617756f38675959c342355d6af2d05d0218dddcc20413e5850a0fd575e5e8dcf62d89f37d50ff49ad63a1e6add0aff1d1bc3ec24b1f304b2431793b7031a34f778e035634701faafbda4c747cf7651eeb23884be2d56c7b2b3904a8da895b610f869e35e696d74e9b9b1b96ce0efa916d788d96e7e7acc3602b1966266f44d90b664280bda23d013aaab0d96536dd8da0fb223d199c7447447ce31b730ef7596553eed9d69d6a232f5aa005b5e35f180527dbd9d7ed8e177a2d061553ceb2bbebdda8df6d5be7d6aa9f9f9462a8a96d9b0d11242c637bea6669466889e31c577c9485f959e7d557db081c5e32c484e1c531fd9c8763918e62486092a32d66d7bba7fe51b70c2bc03f95671a003d55c1b5ae555421ae6685188bcd718f66666feae0a1314de5291fcc777fe70e49e992b50f1c2c37a135547db20308a12e73fbe0cec58b0fa52cbea2a328fd15c898b09ee935fc9976d55a65f3ecceaeb677676060128a789e49c21f2a96f659658330a7f2de362e678ffcba76a8b1de6fca5a8b10695c08bcfa85e24d9d58991324d50cf6ea2e810dd47908a0899a7e865a185cc8f9f2bbb33d7fa60a4f1362618d85d6fc1629ab3a48f095ce8e3805d1f93af64f4d29fca7a96c82161481984b34688b088e9bd9efa3502b01ace516a49481c55e2560a933bd90920a451f5f5afe8fb8ff4bc75ddcded2a0f22daad0d458e03b277a6e5e0a6fbf958b82e3e676c518e028274ae95ceaa9a03b114d7b4458615e7b1b0224ffc596c97586bde03ae61f73263100f1313546c309d535508c73c1ee6ba06d8e36d8b280bf1fa71bd2df934d7c49c3b29a54fe4c864166a592e50ec714586e64f3d0999d9a5057c17f14797f3e3dd48e8b83cecc2fff0cdb41427a5e31e55c872eb13d5f5b5c56828e619c17cad3b57c39081fb75b880e8a3c629c63104c1e9ea1b8cf5354150692e3a4453be413dbc7272f69b9abb32a9dbdc29d0b7432fdc08288e38bb0645d47006266b283e63510a86a0a989b7d3af0dc2440cecd894c3d16f1ddfadbdb121bf432357ce79b3ffc1d7a020c7626b82e56b463e2a6d92164c8ff0d2d41f7e28e30ec5e071701515cec22e9ed9ba0d6b19832b0f6890794a6d03295493fcf73f525b2f36f6f9f4865a0ea2b000fde0fa0fc9263b3f81f8be7c788104edf6707fad56e38f3eb0727d020c43bfae152c3d482aa9a3b4bce01d0dd5a9493b3a142a3fb539bbc1d687a1cca78e8246b0ce0bd28eefe5a21708abab8ab50454c160e55c5d4f7897b5d1dfdbc822eef6364fe84f589426bdc55e25aa8f7abc2e0589ed622ed0086", 0x1000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x4, 0x1, 0x9}) 23:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000e3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000c0000200002801c0001"], 0x64}}, 0x0) 23:52:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000f3100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0e000000200002801c0001"], 0x64}}, 0x0) [ 771.895024] EXT4-fs warning (device sda1): ext4_group_add:1682: No reserved GDT blocks, can't resize 23:52:25 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00)={0x9, @remote}, &(0x7f0000000a40)=0x12, 0x80800) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'x'}, {}, {0x20, '/\x06\x00v/video37\x00'}, {0x20, '/dev/video37\x00'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, '%-\xd4\xe73\x06\x9d\x8d%uK\xea0\xcb\x9f\xfe\xbfQ\xectj$\xbc\xc3[\x85\xdbxU|9\xe6G\xc1N\xe8\xe7\xa2\xdd\x91\x8f\x87L\xfe'}], 0xa, "4a694ceaf539ccdbe24577f9749a4b01ff22f6c046e11d4c5a9e1b"}, 0x76) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x5, 0x1, "5c4bb05a2b9fc840a3ddd47d15aa35ffc6ab0d4bff8cf57ed99741e11b96bcf1", 0x20363059}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x1, 0x401, 0x960, 0xfffeffff, 0x1}) (async) r2 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x1a0755cd, 0x7, 0x0, "9b5302cfd8025f08f75bfadb71aec52ac558844c3795c432e9c5e0f0dc0bcc8a", 0x32314d54}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, '\x00', &(0x7f0000000140)=0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c001e1a8a63b8d5ba242700000000", @ANYRES32=0x0, @ANYBLOB="00000081000000000b00000009000100666c6f77000000001c000200080002000100000008000100eef90100080003000b000200"], 0x4c}}, 0x0) r3 = signalfd4(r2, &(0x7f0000001d40)={[0x2]}, 0x8, 0x80800) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000000fc0)=""/101, 0x65, 0x0, &(0x7f0000001040)=""/79, 0x4f}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40286608, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000bb000000850000ed982b46e300743f228f8aec8c905e09ea18746800fc9af97a07cc3773a32f670633c7214c256964ba553b0173b92a9427dba0fe9d5aefce80bc88b9a8a5b011beec79615985b9ff1a014ee19550d14b358d5bdefdbe03393b545bfb4c00017983950dee1287443ffd2392d9aadd940c36f0cc9e72702001501185975784238bf3128becddef86c47bf57b0709b847a57a1854b5bebc83dd44b5c2c75feb137a39e01b1ecdcf84410a6809e29f6eb76021dba3ea6fe86a1b118796ff8a08f9e2fa738cbafab4292c4230c713ae0f6cf7488aa3eee5a8946d1b016a73232447c1c1be81048d39c4d8e480f51f70c0746a5efece0e2602bfbe9b39dc0a07842bc66da7e33a8bd564384a2442fa535b4520671ede403d47dd03e6eb0eb9b7df2d064ba7873c6751a0843052f4bb403348b28c4814ff254a7e158da4545bd48cc2e38f063d93f1e8b27c17267e5984e08fc46b28e2045f6333ee83352c8d910b1cbd8947090da80de9ffe55739a82e2ea4"], &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x24, &(0x7f0000000f00)=""/36, 0x41100, 0x0, '\x00', 0x0, 0x21, r4, 0x8, &(0x7f0000000f40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x1, 0x3, 0x3ff}, 0x10, r5, r6}, 0x80) (async) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x2) (async) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r8, 0x400, 0x2) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) (async) fcntl$setlease(r9, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x1b, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000098cb000000000000ff03000018000000010000000000000002000000673900010800000018160000", @ANYRES32, @ANYBLOB="00008000000000009500000000000000"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0xed, &(0x7f0000001c40)=""/237, 0xc1100, 0x5, '\x00', 0x0, 0x26, r3, 0x8, &(0x7f0000001d80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0xa, 0xa92, 0xfff}, 0x10, r5, r2, 0x0, &(0x7f0000001e00)=[r2, r7, r8, r2, r2, r2, r2, r2, r9]}, 0x80) (async) r10 = accept4$nfc_llcp(r2, &(0x7f0000000b00), &(0x7f0000000b80)=0x60, 0x80800) write(r10, &(0x7f0000000bc0)="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", 0x1000) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x4, 0x1, 0x9}) [ 772.082404] EXT4-fs warning (device sda1): ext4_group_add:1682: No reserved GDT blocks, can't resize 23:52:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000b) 23:52:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000e0000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000103100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0f000000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00)={0x9, @remote}, &(0x7f0000000a40)=0x12, 0x80800) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'x'}, {}, {0x20, '/\x06\x00v/video37\x00'}, {0x20, '/dev/video37\x00'}, {0x20, '\x00'}, {0x20, '-'}, {0x20, '%-\xd4\xe73\x06\x9d\x8d%uK\xea0\xcb\x9f\xfe\xbfQ\xectj$\xbc\xc3[\x85\xdbxU|9\xe6G\xc1N\xe8\xe7\xa2\xdd\x91\x8f\x87L\xfe'}], 0xa, "4a694ceaf539ccdbe24577f9749a4b01ff22f6c046e11d4c5a9e1b"}, 0x76) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x5, 0x1, "5c4bb05a2b9fc840a3ddd47d15aa35ffc6ab0d4bff8cf57ed99741e11b96bcf1", 0x20363059}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x1, 0x401, 0x960, 0xfffeffff, 0x1}) (async) r2 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x1a0755cd, 0x7, 0x0, "9b5302cfd8025f08f75bfadb71aec52ac558844c3795c432e9c5e0f0dc0bcc8a", 0x32314d54}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0xfffffffa, 0x1, '\x00', &(0x7f0000000140)=0x9}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002c001e1a8a63b8d5ba242700000000", @ANYRES32=0x0, @ANYBLOB="00000081000000000b00000009000100666c6f77000000001c000200080002000100000008000100eef90100080003000b000200"], 0x4c}}, 0x0) r3 = signalfd4(r2, &(0x7f0000001d40)={[0x2]}, 0x8, 0x80800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000000fc0)=""/101, 0x65, 0x0, &(0x7f0000001040)=""/79, 0x4f}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40286608, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='syzkaller\x00', 0x2, 0x24, &(0x7f0000000f00)=""/36, 0x41100, 0x0, '\x00', 0x0, 0x21, r4, 0x8, &(0x7f0000000f40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x1, 0x3, 0x3ff}, 0x10, r5, r6}, 0x80) (async, rerun: 64) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (rerun: 64) fcntl$setlease(r7, 0x400, 0x2) (async) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r8, 0x400, 0x2) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) (async) fcntl$setlease(r9, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x1b, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000098cb000000000000ff03000018000000010000000000000002000000673900010800000018160000", @ANYRES32, @ANYBLOB="00008000000000009500000000000000"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0xed, &(0x7f0000001c40)=""/237, 0xc1100, 0x5, '\x00', 0x0, 0x26, r3, 0x8, &(0x7f0000001d80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0xa, 0xa92, 0xfff}, 0x10, r5, r2, 0x0, &(0x7f0000001e00)=[r2, r7, r8, r2, r2, r2, r2, r2, r9]}, 0x80) (async) r10 = accept4$nfc_llcp(r2, &(0x7f0000000b00), &(0x7f0000000b80)=0x60, 0x80800) write(r10, &(0x7f0000000bc0)="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", 0x1000) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x4, 0x1, 0x9}) 23:52:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d10000000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000603100010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000f0000200002801c0001"], 0x64}}, 0x0) [ 772.426103] EXT4-fs warning (device sda1): ext4_group_add:1682: No reserved GDT blocks, can't resize 23:52:26 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x6, 0x9, 0x34363248, 0x9, 0x7, [{0x20, 0xfffffffd}, {0xfffffe00, 0x1}, {0xb45e}, {0x54ba, 0x9}, {0x5, 0xfffffffa}, {0x9, 0x1f}, {0x1f7a3825, 0x81}, {0x1, 0x1}], 0x20, 0x4a, 0x4, 0x1, 0x1}}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x24200, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4, {0x4, 0x1, 0x10000, 0xfffffe01}}) r4 = getuid() r5 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES8=r4, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r4], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r5, @ANYBLOB="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"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0x9, 0xa, 0x2, "5927137af2500f6e03424d138aba766a2befc9b7f5ec6ceb60adb214d5aaa523", 0x64737664}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_any}, {@uname={'uname', 0x3d, '@&'}}], [{@dont_hash}, {@flag='mand'}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r4}}]}}) 23:52:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 772.695374] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 772.707810] REISERFS (device loop0): using ordered data mode [ 772.713881] reiserfs: using flush barriers [ 772.723549] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 772.739694] REISERFS (device loop0): checking transaction log (loop0) [ 772.749012] REISERFS (device loop0): Using r5 hash to sort names 23:52:26 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000c) 23:52:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003200010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d48000000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00200000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:26 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x6, 0x9, 0x34363248, 0x9, 0x7, [{0x20, 0xfffffffd}, {0xfffffe00, 0x1}, {0xb45e}, {0x54ba, 0x9}, {0x5, 0xfffffffa}, {0x9, 0x1f}, {0x1f7a3825, 0x81}, {0x1, 0x1}], 0x20, 0x4a, 0x4, 0x1, 0x1}}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x24200, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4, {0x4, 0x1, 0x10000, 0xfffffe01}}) r4 = getuid() r5 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES8=r4, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r4], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r5, @ANYBLOB="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"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="01e676f4fc1904efc297a3baa083d7d53048014c35429e763c6f76637cfd757491fe31362d2af6bcf176cfa249a2b36a99ee6b5542c22763a0688867eb2ac09c5078d612c0133ef8a8f40074a8e540e5b262ac889ea44bc2a2bf39dd3ddfd962da624b3b25a036d7e94664086a77f49d81cf9630794a2a15d9e3042b8e67e81dec650851a472e1d5c14d7ff427d8345d8c7219489fb372d509db69bd7f4dff50e8335b3ac8fa847e2ad51e44f3c1b05f81c0a5c0ee142a5523c0f9fa0c3836391c0c2be46601075240eafcba131c0ea34c7fb43af40c870dd7302aa9b0cc123f34d0777a74c655feafb3ad8e996adb64552624976ca74e2e6d006015dfb284220a9f8750eb55223246398a1a99273713d21c94efbc161a3f4e4e4744e795960db7b7c048f8ab937eca63bc9fddbe9d9d594cfe5ce776a7f5c3ffdc57f4c8fb21bd2f262cb40d5634a317d04ff593a61260eff1098da37d", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0x9, 0xa, 0x2, "5927137af2500f6e03424d138aba766a2befc9b7f5ec6ceb60adb214d5aaa523", 0x64737664}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_any}, {@uname={'uname', 0x3d, '@&'}}], [{@dont_hash}, {@flag='mand'}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r4}}]}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x6, 0x9, 0x34363248, 0x9, 0x7, [{0x20, 0xfffffffd}, {0xfffffe00, 0x1}, {0xb45e}, {0x54ba, 0x9}, {0x5, 0xfffffffa}, {0x9, 0x1f}, {0x1f7a3825, 0x81}, {0x1, 0x1}], 0x20, 0x4a, 0x4, 0x1, 0x1}}) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x24200, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4, {0x4, 0x1, 0x10000, 0xfffffe01}}) (async) getuid() (async) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES8=r4, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r4], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") (async) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r5, @ANYBLOB="eea73c3ca047349ab66d529fb1e2bdc61875c6ccebea30ba1b8977c632ddcbe0ed04f986b68ee600044bd75d3cfd10cc2ec88ccff020447cd9caded4abf65767e9dbbd7bd841a8ce3eb44c719a2e6c341bf68b2a0af04f1cc951b190c7fd59e62a46b6d4a12229d9283b825ceef836ffdbd0622cdc9b7c9a55b3f465def5740814395f095fc44a4cf6fe14b0d31f384214559a0105d577557215473973f3b70178f49f0e48dbe138562f4d21cad59fafb7fbaf76461c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de696a731d204db9cdbde38324513798bba5820152e198b1ff06b5f79d3faae445cea08b9c949d78e627b84e3210284b29be04a16e007319ff14084207e547a14c00"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0x9, 0xa, 0x2, "5927137af2500f6e03424d138aba766a2befc9b7f5ec6ceb60adb214d5aaa523", 0x64737664}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_any}, {@uname={'uname', 0x3d, '@&'}}], [{@dont_hash}, {@flag='mand'}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r4}}]}}) (async) 23:52:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00480000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d4c000000200002801c0001"], 0x64}}, 0x0) 23:52:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000006700010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000f00010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d004c0000200002801c0001"], 0x64}}, 0x0) [ 773.204080] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 773.223503] REISERFS (device loop0): using ordered data mode [ 773.241811] reiserfs: using flush barriers [ 773.261074] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 773.289765] REISERFS (device loop0): checking transaction log (loop0) [ 773.300446] REISERFS (device loop0): Using r5 hash to sort names 23:52:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000d) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d60000000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d65580000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x6, 0x9, 0x34363248, 0x9, 0x7, [{0x20, 0xfffffffd}, {0xfffffe00, 0x1}, {0xb45e}, {0x54ba, 0x9}, {0x5, 0xfffffffa}, {0x9, 0x1f}, {0x1f7a3825, 0x81}, {0x1, 0x1}], 0x20, 0x4a, 0x4, 0x1, 0x1}}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x24200, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4, {0x4, 0x1, 0x10000, 0xfffffe01}}) r4 = getuid() r5 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES8=r4, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r4], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r5, @ANYBLOB="eea73c3ca047349ab66d529fb1e2bdc61875c6ccebea30ba1b8977c632ddcbe0ed04f986b68ee600044bd75d3cfd10cc2ec88ccff020447cd9caded4abf65767e9dbbd7bd841a8ce3eb44c719a2e6c341bf68b2a0af04f1cc951b190c7fd59e62a46b6d4a12229d9283b825ceef836ffdbd0622cdc9b7c9a55b3f465def5740814395f095fc44a4cf6fe14b0d31f384214559a0105d577557215473973f3b70178f49f0e48dbe138562f4d21cad59fafb7fbaf76461c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de696a731d204db9cdbde38324513798bba5820152e198b1ff06b5f79d3faae445cea08b9c949d78e627b84e3210284b29be04a16e007319ff14084207e547a14c00"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0x9, 0xa, 0x2, "5927137af2500f6e03424d138aba766a2befc9b7f5ec6ceb60adb214d5aaa523", 0x64737664}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_any}, {@uname={'uname', 0x3d, '@&'}}], [{@dont_hash}, {@flag='mand'}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r4}}]}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix_mp={0x6, 0x9, 0x34363248, 0x9, 0x7, [{0x20, 0xfffffffd}, {0xfffffe00, 0x1}, {0xb45e}, {0x54ba, 0x9}, {0x5, 0xfffffffa}, {0x9, 0x1f}, {0x1f7a3825, 0x81}, {0x1, 0x1}], 0x20, 0x4a, 0x4, 0x1, 0x1}}) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x24200, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x4, {0x4, 0x1, 0x10000, 0xfffffe01}}) (async) getuid() (async) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES8=r4, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r4], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") (async) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r5, @ANYBLOB="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"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000003c0)={0x9, 0xa, 0x2, "5927137af2500f6e03424d138aba766a2befc9b7f5ec6ceb60adb214d5aaa523", 0x64737664}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100008, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}, {@access_any}, {@uname={'uname', 0x3d, '@&'}}], [{@dont_hash}, {@flag='mand'}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_gt={'euid>', r4}}]}}) (async) 23:52:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d68000000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003200010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d025e0000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d6c000000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 773.731954] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 773.752090] REISERFS (device loop0): using ordered data mode [ 773.783452] reiserfs: using flush barriers [ 773.789732] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 773.806312] REISERFS (device loop0): checking transaction log (loop0) [ 773.814349] REISERFS (device loop0): Using r5 hash to sort names 23:52:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000e) 23:52:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000006700010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d74000000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00600000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:27 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xffff35c5) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003103000300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:27 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xffff35c5) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xffff35c5) (async) 23:52:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d58650000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d7a000000200002801c0001"], 0x64}}, 0x0) 23:52:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 774.211315] nla_parse: 37 callbacks suppressed [ 774.211326] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0000000200002801c0001"], 0x64}}, 0x0) 23:52:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async, rerun: 32) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (rerun: 32) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0xffff35c5) 23:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003104000300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000000f) 23:52:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00680000200002801c0001"], 0x64}}, 0x0) 23:52:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 774.553275] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syncfs(r0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x101, 0x1, 0x7ff, 0x4aa1, 0x8, 0xfffffffd, 0x7, 0xfffffff8, 0xffffffff, 0x7, 0x5, 0x81, 0x6, 0xb0, 0xff, 0x4, 0x80, 0xfd8, 0x0, 0x7, 0x0, 0x3, 0xe2, 0x4000001, 0x0, 0x1, 0x5, 0x7, 0x1000, 0xfff, 0x80, 0x81]}) 23:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003102010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d58020000200002801c0001"], 0x64}}, 0x0) [ 774.598915] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d006c0000200002801c0001"], 0x64}}, 0x0) 23:52:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003103010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syncfs(r0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x101, 0x1, 0x7ff, 0x4aa1, 0x8, 0xfffffffd, 0x7, 0xfffffff8, 0xffffffff, 0x7, 0x5, 0x81, 0x6, 0xb0, 0xff, 0x4, 0x80, 0xfd8, 0x0, 0x7, 0x0, 0x3, 0xe2, 0x4000001, 0x0, 0x1, 0x5, 0x7, 0x1000, 0xfff, 0x80, 0x81]}) [ 774.766046] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.801837] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00740000200002801c0001"], 0x64}}, 0x0) [ 774.895753] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000010) 23:52:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0020000200002801c0001"], 0x64}}, 0x0) 23:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003104010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:28 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) syncfs(r0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x101, 0x1, 0x7ff, 0x4aa1, 0x8, 0xfffffffd, 0x7, 0xfffffff8, 0xffffffff, 0x7, 0x5, 0x81, 0x6, 0xb0, 0xff, 0x4, 0x80, 0xfd8, 0x0, 0x7, 0x0, 0x3, 0xe2, 0x4000001, 0x0, 0x1, 0x5, 0x7, 0x1000, 0xfff, 0x80, 0x81]}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) syncfs(r0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x101, 0x1, 0x7ff, 0x4aa1, 0x8, 0xfffffffd, 0x7, 0xfffffff8, 0xffffffff, 0x7, 0x5, 0x81, 0x6, 0xb0, 0xff, 0x4, 0x80, 0xfd8, 0x0, 0x7, 0x0, 0x3, 0xe2, 0x4000001, 0x0, 0x1, 0x5, 0x7, 0x1000, 0xfff, 0x80, 0x81]}) (async) 23:52:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d007a0000200002801c0001"], 0x64}}, 0x0) 23:52:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003106010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:28 executing program 0: ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) ioctl(0xffffffffffffffff, 0x200, &(0x7f0000000080)="9e04954864d62226c1a917f4c09b26c4b84d8e9502bec5bc1753c019e78fbc5e78e7af05c7d420b4073ae165b4b9f6ac1f70cac2b9596bf1bd9f47eb37e9f852f97534d7daf31eee5c95dbdd3bdcc9ffb3a29df15ee112d6da6a102ad9d4585afb1cb0cdd1fcbe31ecc491db78fb4cd0cf6ad94bcc85a8868032d9262d108a188c62aaba50b02274f6ca7ff8b128ff81200520b7c18c8a1ac7bcff151e6a9008adcff56a152cdbd72ce67bf9a8a29e3678e3f2f9a715a178b71b8468f200cec3f491a171") r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00810000200002801c0001"], 0x64}}, 0x0) [ 775.125344] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 775.157893] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00030000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003107010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 775.296508] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 775.359338] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:29 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000011) 23:52:29 executing program 0: ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) ioctl(0xffffffffffffffff, 0x200, &(0x7f0000000080)="9e04954864d62226c1a917f4c09b26c4b84d8e9502bec5bc1753c019e78fbc5e78e7af05c7d420b4073ae165b4b9f6ac1f70cac2b9596bf1bd9f47eb37e9f852f97534d7daf31eee5c95dbdd3bdcc9ffb3a29df15ee112d6da6a102ad9d4585afb1cb0cdd1fcbe31ecc491db78fb4cd0cf6ad94bcc85a8868032d9262d108a188c62aaba50b02274f6ca7ff8b128ff81200520b7c18c8a1ac7bcff151e6a9008adcff56a152cdbd72ce67bf9a8a29e3678e3f2f9a715a178b71b8468f200cec3f491a171") (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003108010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00050000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00060000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310a010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:29 executing program 0: ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) (async, rerun: 32) ioctl(0xffffffffffffffff, 0x200, &(0x7f0000000080)="9e04954864d62226c1a917f4c09b26c4b84d8e9502bec5bc1753c019e78fbc5e78e7af05c7d420b4073ae165b4b9f6ac1f70cac2b9596bf1bd9f47eb37e9f852f97534d7daf31eee5c95dbdd3bdcc9ffb3a29df15ee112d6da6a102ad9d4585afb1cb0cdd1fcbe31ecc491db78fb4cd0cf6ad94bcc85a8868032d9262d108a188c62aaba50b02274f6ca7ff8b128ff81200520b7c18c8a1ac7bcff151e6a9008adcff56a152cdbd72ce67bf9a8a29e3678e3f2f9a715a178b71b8468f200cec3f491a171") (async, rerun: 32) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d02f00000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310c010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:29 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000012) 23:52:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00070000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) lseek(r2, 0xfffffffffffff558, 0x2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x6}) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x2, @raw_data=[0x0, 0xe5d, 0x7, 0x100000, 0xffffffff, 0x52, 0x3, 0x1000, 0x24, 0x0, 0x53, 0x2, 0x0, 0x7, 0xffff8001, 0x1]}) 23:52:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffff000200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310e010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000001200002801c0001"], 0x64}}, 0x0) 23:52:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x3}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:29 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) lseek(r2, 0xfffffffffffff558, 0x2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x6}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x2, @raw_data=[0x0, 0xe5d, 0x7, 0x100000, 0xffffffff, 0x52, 0x3, 0x1000, 0x24, 0x0, 0x53, 0x2, 0x0, 0x7, 0xffff8001, 0x1]}) 23:52:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310f010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00090000200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000002200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000013) 23:52:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x4}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003110010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000a0000200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) lseek(r2, 0xfffffffffffff558, 0x2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x6}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x2, @raw_data=[0x0, 0xe5d, 0x7, 0x100000, 0xffffffff, 0x52, 0x3, 0x1000, 0x24, 0x0, 0x53, 0x2, 0x0, 0x7, 0xffff8001, 0x1]}) 23:52:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000003200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000004200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003160010300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000b0000200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000240)={0x30, 0x4, &(0x7f0000000140)="3cd586c843e2f9617f39511f433ea84d71d27184d38f63400f221e7c2bc836554fe2161e8ebaec17d57deaa1cb791031deb8fbe24c4b7c1746fca1ffe7e8a55dbf0eb4e2df7dcb88ea9a39456a4b805765d3b09a0c1f369210a84de9a15217aac42e2a30f61bb73f934623aa86bf7d60ab87f5b6d8e30f71e02fc59e56d9ac8308fb6595e18a4d9b660bd14cc9946de8a98b7de1792f84e62486695f3064d433c4ad7a2bb74591864e790f22aef819c92ec6e584884222513c938ffedf2fbb704bb13c1c85259352ad6afa66c9b94138", {0x9, 0x100, 0x31364d59, 0x6, 0x80000000, 0x3, 0x7, 0x3}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xffffffff, 0x0, '\x00', {0x0, @bt={0x4, 0x9, 0x0, 0x0, 0x3, 0x3, 0x10000, 0x80, 0x80, 0x7, 0x9, 0xfb, 0xfffffff9, 0x3f, 0x2, 0x2, {0x10001, 0x255c}, 0x28}}}) 23:52:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000005200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000014) 23:52:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000c0000200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0xe}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100070300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000006200002801c0001"], 0x64}}, 0x0) 23:52:30 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000240)={0x30, 0x4, &(0x7f0000000140)="3cd586c843e2f9617f39511f433ea84d71d27184d38f63400f221e7c2bc836554fe2161e8ebaec17d57deaa1cb791031deb8fbe24c4b7c1746fca1ffe7e8a55dbf0eb4e2df7dcb88ea9a39456a4b805765d3b09a0c1f369210a84de9a15217aac42e2a30f61bb73f934623aa86bf7d60ab87f5b6d8e30f71e02fc59e56d9ac8308fb6595e18a4d9b660bd14cc9946de8a98b7de1792f84e62486695f3064d433c4ad7a2bb74591864e790f22aef819c92ec6e584884222513c938ffedf2fbb704bb13c1c85259352ad6afa66c9b94138", {0x9, 0x100, 0x31364d59, 0x6, 0x80000000, 0x3, 0x7, 0x3}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xffffffff, 0x0, '\x00', {0x0, @bt={0x4, 0x9, 0x0, 0x0, 0x3, 0x3, 0x10000, 0x80, 0x80, 0x7, 0x9, 0xfb, 0xfffffff9, 0x3f, 0x2, 0x2, {0x10001, 0x255c}, 0x28}}}) 23:52:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0xf}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100200300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000007200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000e0000200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000240)={0x30, 0x4, &(0x7f0000000140)="3cd586c843e2f9617f39511f433ea84d71d27184d38f63400f221e7c2bc836554fe2161e8ebaec17d57deaa1cb791031deb8fbe24c4b7c1746fca1ffe7e8a55dbf0eb4e2df7dcb88ea9a39456a4b805765d3b09a0c1f369210a84de9a15217aac42e2a30f61bb73f934623aa86bf7d60ab87f5b6d8e30f71e02fc59e56d9ac8308fb6595e18a4d9b660bd14cc9946de8a98b7de1792f84e62486695f3064d433c4ad7a2bb74591864e790f22aef819c92ec6e584884222513c938ffedf2fbb704bb13c1c85259352ad6afa66c9b94138", {0x9, 0x100, 0x31364d59, 0x6, 0x80000000, 0x3, 0x7, 0x3}}) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xffffffff, 0x0, '\x00', {0x0, @bt={0x4, 0x9, 0x0, 0x0, 0x3, 0x3, 0x10000, 0x80, 0x80, 0x7, 0x9, 0xfb, 0xfffffff9, 0x3f, 0x2, 0x2, {0x10001, 0x255c}, 0x28}}}) 23:52:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x60}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000f0000200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100020300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x1}) 23:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000008200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000015) 23:52:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x1}) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100040300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000009200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00200000200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100070300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x0, 0x1}) 23:52:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x3}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100080300000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000a200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000016) 23:52:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00480000200002801c0001"], 0x64}}, 0x0) 23:52:31 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8441, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6ce1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:52:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000100b8000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x4}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000b200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8441, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6ce1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010302000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000c200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d004c0000200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010303000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:32 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000017) 23:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000e200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d02580000200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8441, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6ce1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x8441, 0x0) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x6ce1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) 23:52:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xe}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010304000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000f200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @pix_mp={0x200, 0x9495, 0x32314d59, 0x1, 0xa, [{0x3, 0x9}, {0x2, 0x2}, {0x71fc, 0x9}, {0x7, 0x401}, {0x1ff}, {0x7fff, 0x8}, {0xfff}, {0x1, 0x7fff}], 0xa9, 0x3, 0x0, 0x0, 0x7}}) 23:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010306000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d65580000200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000010200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000001b) 23:52:32 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @pix_mp={0x200, 0x9495, 0x32314d59, 0x1, 0xa, [{0x3, 0x9}, {0x2, 0x2}, {0x71fc, 0x9}, {0x7, 0x401}, {0x1ff}, {0x7fff, 0x8}, {0xfff}, {0x1, 0x7fff}], 0xa9, 0x3, 0x0, 0x0, 0x7}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @pix_mp={0x200, 0x9495, 0x32314d59, 0x1, 0xa, [{0x3, 0x9}, {0x2, 0x2}, {0x71fc, 0x9}, {0x7, 0x401}, {0x1ff}, {0x7fff, 0x8}, {0xfff}, {0x1, 0x7fff}], 0xa9, 0x3, 0x0, 0x0, 0x7}}) (async) 23:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010307000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00600000200002801c0001"], 0x64}}, 0x0) 23:52:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x60}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000020200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @pix_mp={0x200, 0x9495, 0x32314d59, 0x1, 0xa, [{0x3, 0x9}, {0x2, 0x2}, {0x71fc, 0x9}, {0x7, 0x401}, {0x1ff}, {0x7fff, 0x8}, {0xfff}, {0x1, 0x7fff}], 0xa9, 0x3, 0x0, 0x0, 0x7}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @pix_mp={0x200, 0x9495, 0x32314d59, 0x1, 0xa, [{0x3, 0x9}, {0x2, 0x2}, {0x71fc, 0x9}, {0x7, 0x401}, {0x1ff}, {0x7fff, 0x8}, {0xfff}, {0x1, 0x7fff}], 0xa9, 0x3, 0x0, 0x0, 0x7}}) (async) [ 779.300658] nla_parse: 39 callbacks suppressed [ 779.300668] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.332619] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010308000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 779.355811] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xf0}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d58650000200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000048200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x3, 0x0, @raw_data=[0x3f, 0xfffffffe, 0x7ff, 0x2, 0xffffffff, 0x58c, 0x4, 0xff, 0x2, 0x200, 0xd397, 0x8001, 0x10000, 0x101, 0xfff, 0x401]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x28, 0x69, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x14) [ 779.520283] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.533882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 779.560529] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:33 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000036) 23:52:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030a000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000004c200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00680000200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x3, 0x0, @raw_data=[0x3f, 0xfffffffe, 0x7ff, 0x2, 0xffffffff, 0x58c, 0x4, 0xff, 0x2, 0x200, 0xd397, 0x8001, 0x10000, 0x101, 0xfff, 0x401]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x28, 0x69, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x14) [ 779.826141] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 779.854209] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d006c0000200002801c0001"], 0x64}}, 0x0) 23:52:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xe00}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030c000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:33 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x3, 0x0, @raw_data=[0x3f, 0xfffffffe, 0x7ff, 0x2, 0xffffffff, 0x58c, 0x4, 0xff, 0x2, 0x200, 0xd397, 0x8001, 0x10000, 0x101, 0xfff, 0x401]}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delnexthop={0x28, 0x69, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x14) 23:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000025e200002801c0001"], 0x64}}, 0x0) [ 779.874890] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xeac}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 780.001407] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000004f) 23:52:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030e000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00740000200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="9bb74f3944cbffc00bf7b2f4b6933ba2553990cbb60338c7a0aee515666bda7b8109b3b750f220cf0719fd68943843601d8fb3073e22b451c598dd727959dc4ea27508f0adcd355166658d7e535c4d22e734aa7923dc7826208fb2d6c996e7c279aaa925348db0f16e7e6366bc7b2f33af8a5c084ecb62d3ff29c131", 0x7c, 0x40000, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="62aa55b06e423cc990d1f3548c0ca62cc2a5e9e80fb200634baeecb1fa20c3c96b6f90cbba949e3b2b04ac32cd014514a312b03c98e2988cd5ecfe81c419a3", 0x3f, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x7}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffff7f}}, './file0\x00'}) 23:52:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000060200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xec0}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d007a0000200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00005865200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:34 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="9bb74f3944cbffc00bf7b2f4b6933ba2553990cbb60338c7a0aee515666bda7b8109b3b750f220cf0719fd68943843601d8fb3073e22b451c598dd727959dc4ea27508f0adcd355166658d7e535c4d22e734aa7923dc7826208fb2d6c996e7c279aaa925348db0f16e7e6366bc7b2f33af8a5c084ecb62d3ff29c131", 0x7c, 0x40000, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001}) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="62aa55b06e423cc990d1f3548c0ca62cc2a5e9e80fb200634baeecb1fa20c3c96b6f90cbba949e3b2b04ac32cd014514a312b03c98e2988cd5ecfe81c419a3", 0x3f, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x7}, 0x1c) (rerun: 32) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffff7f}}, './file0\x00'}) (rerun: 32) 23:52:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030f000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00810000200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000068) 23:52:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000068200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0x6000}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010310000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:34 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="9bb74f3944cbffc00bf7b2f4b6933ba2553990cbb60338c7a0aee515666bda7b8109b3b750f220cf0719fd68943843601d8fb3073e22b451c598dd727959dc4ea27508f0adcd355166658d7e535c4d22e734aa7923dc7826208fb2d6c996e7c279aaa925348db0f16e7e6366bc7b2f33af8a5c084ecb62d3ff29c131", 0x7c, 0x40000, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="62aa55b06e423cc990d1f3548c0ca62cc2a5e9e80fb200634baeecb1fa20c3c96b6f90cbba949e3b2b04ac32cd014514a312b03c98e2988cd5ecfe81c419a3", 0x3f, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x7}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffff7f}}, './file0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="9bb74f3944cbffc00bf7b2f4b6933ba2553990cbb60338c7a0aee515666bda7b8109b3b750f220cf0719fd68943843601d8fb3073e22b451c598dd727959dc4ea27508f0adcd355166658d7e535c4d22e734aa7923dc7826208fb2d6c996e7c279aaa925348db0f16e7e6366bc7b2f33af8a5c084ecb62d3ff29c131", 0x7c, 0x40000, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x9}, 0x1c) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="62aa55b06e423cc990d1f3548c0ca62cc2a5e9e80fb200634baeecb1fa20c3c96b6f90cbba949e3b2b04ac32cd014514a312b03c98e2988cd5ecfe81c419a3", 0x3f, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @remote, 0x7}, 0x1c) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000200)=""/210, &(0x7f0000000300)=0xd2) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffff7f}}, './file0\x00'}) (async) 23:52:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00000200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000006c200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xac0e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d02f00000200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010360000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000074200002801c0001"], 0x64}}, 0x0) 23:52:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xc00e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000000008b) 23:52:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/acpi_cpufreq', 0x111980, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x73}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc68}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x3, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000001280)) 23:52:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffff000200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103f0000000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xf000}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000007a200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300030000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/acpi_cpufreq', 0x111980, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x73}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc68}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x3, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000001280)) 23:52:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{0x20, 0x0, 0xffff}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000081200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000001200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300060000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000b5) 23:52:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/acpi_cpufreq', 0x111980, 0x0) (async, rerun: 64) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x73}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc68}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x3, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000001280)) 23:52:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dffffa888200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000002200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300070000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x64, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dffffff9e200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000003200002801c0001"], 0x64}}, 0x0) 23:52:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000a0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:35 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x8, @pix={0x7fff, 0x10000, 0x30314752, 0x3, 0x5, 0xb1, 0x1, 0x80000001, 0x0, 0x3, 0x1, 0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x800}) 23:52:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xddc, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:36 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000cd) 23:52:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000002f0200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000004200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103850a0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x8, @pix={0x7fff, 0x10000, 0x30314752, 0x3, 0x5, 0xb1, 0x1, 0x80000001, 0x0, 0x3, 0x1, 0x4}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x800}) 23:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xde4, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000c0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000005200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffffff0200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xdec, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x8, @pix={0x7fff, 0x10000, 0x30314752, 0x3, 0x5, 0xb1, 0x1, 0x80000001, 0x0, 0x3, 0x1, 0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x800}) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000006200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000ce) 23:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xdf4, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000e0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @start={0x8}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffffffc200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000007200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000008200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xdfc, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000f0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d88a8ffff200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000009200002801c0001"], 0x64}}, 0x0) 23:52:36 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @start={0x8}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010365580000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xe04, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f0ffff200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000cf) 23:52:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000a200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @start={0x8}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d7fffffff200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xe0c, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300600000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000b200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xea4, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d9effffff200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r4, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) r5 = getuid() r6 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRES8=r5, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r5], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r6, @ANYBLOB="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"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r5, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000016c0)={0xffffffffffffffff, 0x101, 0x4, 0x4}) r10 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r10, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000280)={0x13e4, 0x2d, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x94}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="e80078fe"]}, @generic="62bf07c4dabfa5367d526f78607705a99a3332b1e659c2582c048fc35668bfda1a49fb3d6e28dc2fc4706370b9fa44240ffc5f4b272554af351d03164cc99217947b6c00c3cdb450d44e1e605218e30d9d0759c7f1aa466f310eff775228b2365e", @nested={0x15f, 0x4e, 0x0, 0x1, [@generic="589864667771f7c490d3d2d586d25c8ede6e8550ef5f49b085c67d3c4d7f740486efac4851a56a6dd155c11fef2ff2b5a0a53ba77f83ebbde2c6b2f51e3423f8548036f538cc2a4e3725fadd591f37dc4b99af23ecd1d2f5088d23fec69102554dd0be42821d445dd41f7779face68a7189bc842e282f5e34e007834eafdfdbd374b406c8d9a44a3fb64ec047b1c3a06935a498d77efd3fd2d2c087f5e7564de055173f6d21944664beac1003dd1aa59358dc92a1595932993df1f22a37eec1a2b579bdfd998a3768ebdecaa0a0e2dc390f8da01cb6b9a516a1e4208d07b15064a0f", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x58, 0x0, 0x0, @fd}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="cb15130cd7537a02661600ea5aa806ae3936c0e5257c97db30206bf2b3c29b661eba45f64b6faaa1645d54c2581ccf46835036ebf0b4102155addf5d5f9e5a6f53216adcb303b5c46611209e4c7e37fa01cc587a39f5ed7e4ff13e64fca2c8720a"]}, @nested={0xf1, 0x37, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ecab32632a74ac39cef60d4285c43e9aade25185d22f9776e25ef43cb56f55ecf47990d60570c7d1d08a5003243cf948e73f54b11338d20304d061", @generic="579a8e29e45ba7db64fd2daec219980bf98fecadcf539aca68f0b533773a76680a160feceed7e3fb4aa0a2adfb5a65d24afe2c63dc530b0b0e614e3aeb3682d7c1db6863961bed09908ba863d2858d617a94acf23b68bc0d717e19b3df9302ef2472affc037536f9cab53b82384fff51c9f42e10658c667d7eaa18b68606f8b73c22ad7edd42b1be426ff29952c2b5f803c0e6c5182f6c86d58a4a386daf7cba0487", @typed={0x6, 0x46, 0x0, 0x0, @str='\\\x00'}]}, @generic="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", @typed={0x8, 0x16, 0x0, 0x0, @uid}, @generic="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", @typed={0x8, 0x29, 0x0, 0x0, @fd}]}, 0x13e4}], 0x1, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x110}, 0x4001) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000c200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010358650000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000dc) 23:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0xeac, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23:52:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0ffffff200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000e200002801c0001"], 0x64}}, 0x0) 23:52:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300810000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 784.044178] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 784.058946] REISERFS (device loop0): using ordered data mode [ 784.083224] reiserfs: using flush barriers [ 784.112034] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 23:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}}, 0x1c}}, 0x0) 23:52:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfcffffff200002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000000f200002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030a850000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 784.204130] REISERFS (device loop0): checking transaction log (loop0) [ 784.236543] REISERFS (device loop0): Using r5 hash to sort names [ 784.348708] nla_parse: 66 callbacks suppressed [ 784.348718] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 784.371219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 784.390405] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:38 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async, rerun: 32) fcntl$setlease(r1, 0x400, 0x2) (rerun: 32) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async, rerun: 32) r4 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) (rerun: 32) wait4(r4, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) (async) r5 = getuid() r6 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRES8=r5, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r5], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r6, @ANYBLOB="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"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r5, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) (async) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) (async) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000016c0)={0xffffffffffffffff, 0x101, 0x4, 0x4}) (async) r10 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r10, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000280)={0x13e4, 0x2d, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x94}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="e80078fe"]}, @generic="62bf07c4dabfa5367d526f78607705a99a3332b1e659c2582c048fc35668bfda1a49fb3d6e28dc2fc4706370b9fa44240ffc5f4b272554af351d03164cc99217947b6c00c3cdb450d44e1e605218e30d9d0759c7f1aa466f310eff775228b2365e", @nested={0x15f, 0x4e, 0x0, 0x1, [@generic="589864667771f7c490d3d2d586d25c8ede6e8550ef5f49b085c67d3c4d7f740486efac4851a56a6dd155c11fef2ff2b5a0a53ba77f83ebbde2c6b2f51e3423f8548036f538cc2a4e3725fadd591f37dc4b99af23ecd1d2f5088d23fec69102554dd0be42821d445dd41f7779face68a7189bc842e282f5e34e007834eafdfdbd374b406c8d9a44a3fb64ec047b1c3a06935a498d77efd3fd2d2c087f5e7564de055173f6d21944664beac1003dd1aa59358dc92a1595932993df1f22a37eec1a2b579bdfd998a3768ebdecaa0a0e2dc390f8da01cb6b9a516a1e4208d07b15064a0f", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x58, 0x0, 0x0, @fd}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="cb15130cd7537a02661600ea5aa806ae3936c0e5257c97db30206bf2b3c29b661eba45f64b6faaa1645d54c2581ccf46835036ebf0b4102155addf5d5f9e5a6f53216adcb303b5c46611209e4c7e37fa01cc587a39f5ed7e4ff13e64fca2c8720a"]}, @nested={0xf1, 0x37, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ecab32632a74ac39cef60d4285c43e9aade25185d22f9776e25ef43cb56f55ecf47990d60570c7d1d08a5003243cf948e73f54b11338d20304d061", @generic="579a8e29e45ba7db64fd2daec219980bf98fecadcf539aca68f0b533773a76680a160feceed7e3fb4aa0a2adfb5a65d24afe2c63dc530b0b0e614e3aeb3682d7c1db6863961bed09908ba863d2858d617a94acf23b68bc0d717e19b3df9302ef2472affc037536f9cab53b82384fff51c9f42e10658c667d7eaa18b68606f8b73c22ad7edd42b1be426ff29952c2b5f803c0e6c5182f6c86d58a4a386daf7cba0487", @typed={0x6, 0x46, 0x0, 0x0, @str='\\\x00'}]}, @generic="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", @typed={0x8, 0x16, 0x0, 0x0, @uid}, @generic="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", @typed={0x8, 0x29, 0x0, 0x0, @fd}]}, 0x13e4}], 0x1, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x110}, 0x4001) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}}, 0x1c}}, 0x0) 23:52:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300f00000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000010200002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000010002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000f6) [ 784.798760] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 784.836047] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103fffff000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 784.852108] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}}, 0x1c}}, 0x0) 23:52:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000020200002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000030002801c0001"], 0x64}}, 0x0) [ 785.057239] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.119515] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.152865] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000048200002801c0001"], 0x64}}, 0x0) 23:52:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000000fa) [ 785.200916] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 785.398467] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 785.458007] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.472971] REISERFS (device loop0): using ordered data mode [ 785.545082] reiserfs: using flush barriers [ 785.622852] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 785.821376] REISERFS (device loop0): checking transaction log (loop0) [ 785.928765] REISERFS (device loop0): Using r5 hash to sort names [ 786.041609] reiserfs: enabling write barrier flush mode [ 786.126716] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 23:52:40 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) fcntl$setlease(r3, 0x400, 0x2) (async) r4 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r4, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) (async) r5 = getuid() r6 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x120c081, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYBLOB="46c4f939ea6575a9ac4d4aacca51947a072a3a57bc14ba47a6cd3df774dacb707d32ba901a7dc603dc064c104d36f271f94c89faffa42f20ee29a6885a685c25ebe0579d0f90b436cd12bf050b585cc6e4b1ba2ae76a9f4ece56049f5944243f6415ed3131a05c936173d0a98fa4aa71703da141405137fd38b967f2cf", @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRES8=r5, @ANYBLOB="432ae3144a6d52c92b70e50663165d5e0fbd2005652a2ca8b5766da259cc71563ae6ef4a40912a75d24944084af158ed25a2f5a52c7af88a7f9490bbfe0100b4764dc0a037eefa52d67910f3358e4b53b65e3c1d015181a14029f7d6d93b2d22a5b48b411c5a8a8a839c314707efe2b779026e0802399875123d85be875c4a85d824d090face49887402cc3adbb5be77662158b37272b59e6f31f36cdf48c3c030a566dc12270691f4f0496468d9ad2c1382831fc1079068eb4f7361c1f76b99174d165ad84b364bdae03480f569e7612f59a27d2b1d24312223a709f9bf45bde9048a5eea85e024f53728b2d51779", @ANYRES8=r5], 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000ac0)=ANY=[@ANYRES8=r6, @ANYBLOB="eea73c3ca047349ab66d529fb1e2bdc61875c6ccebea30ba1b8977c632ddcbe0ed04f986b68ee600044bd75d3cfd10cc2ec88ccff020447cd9caded4abf65767e9dbbd7bd841a8ce3eb44c719a2e6c341bf68b2a0af04f1cc951b190c7fd59e62a46b6d4a12229d9283b825ceef836ffdbd0622cdc9b7c9a55b3f465def5740814395f095fc44a4cf6fe14b0d31f384214559a0105d577557215473973f3b70178f49f0e48dbe138562f4d21cad59fafb7fbaf76461c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de696a731d204db9cdbde38324513798bba5820152e198b1ff06b5f79d3faae445cea08b9c949d78e627b84e3210284b29be04a16e007319ff14084207e547a14c00"/297, @ANYRES16, @ANYRES64, @ANYRESOCT=r5, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x0) (async) fcntl$setlease(r7, 0x400, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r8, 0x400, 0x2) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000016c0)={0xffffffffffffffff, 0x101, 0x4, 0x4}) (async) r10 = syz_clone(0x20000000, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0) wait4(r10, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)=[{&(0x7f0000000280)={0x13e4, 0x2d, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x32, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x94}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="e80078fe"]}, @generic="62bf07c4dabfa5367d526f78607705a99a3332b1e659c2582c048fc35668bfda1a49fb3d6e28dc2fc4706370b9fa44240ffc5f4b272554af351d03164cc99217947b6c00c3cdb450d44e1e605218e30d9d0759c7f1aa466f310eff775228b2365e", @nested={0x15f, 0x4e, 0x0, 0x1, [@generic="589864667771f7c490d3d2d586d25c8ede6e8550ef5f49b085c67d3c4d7f740486efac4851a56a6dd155c11fef2ff2b5a0a53ba77f83ebbde2c6b2f51e3423f8548036f538cc2a4e3725fadd591f37dc4b99af23ecd1d2f5088d23fec69102554dd0be42821d445dd41f7779face68a7189bc842e282f5e34e007834eafdfdbd374b406c8d9a44a3fb64ec047b1c3a06935a498d77efd3fd2d2c087f5e7564de055173f6d21944664beac1003dd1aa59358dc92a1595932993df1f22a37eec1a2b579bdfd998a3768ebdecaa0a0e2dc390f8da01cb6b9a516a1e4208d07b15064a0f", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x58, 0x0, 0x0, @fd}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="cb15130cd7537a02661600ea5aa806ae3936c0e5257c97db30206bf2b3c29b661eba45f64b6faaa1645d54c2581ccf46835036ebf0b4102155addf5d5f9e5a6f53216adcb303b5c46611209e4c7e37fa01cc587a39f5ed7e4ff13e64fca2c8720a"]}, @nested={0xf1, 0x37, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="ecab32632a74ac39cef60d4285c43e9aade25185d22f9776e25ef43cb56f55ecf47990d60570c7d1d08a5003243cf948e73f54b11338d20304d061", @generic="579a8e29e45ba7db64fd2daec219980bf98fecadcf539aca68f0b533773a76680a160feceed7e3fb4aa0a2adfb5a65d24afe2c63dc530b0b0e614e3aeb3682d7c1db6863961bed09908ba863d2858d617a94acf23b68bc0d717e19b3df9302ef2472affc037536f9cab53b82384fff51c9f42e10658c667d7eaa18b68606f8b73c22ad7edd42b1be426ff29952c2b5f803c0e6c5182f6c86d58a4a386daf7cba0487", @typed={0x6, 0x46, 0x0, 0x0, @str='\\\x00'}]}, @generic="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", @typed={0x8, 0x16, 0x0, 0x0, @uid}, @generic="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", @typed={0x8, 0x29, 0x0, 0x0, @fd}]}, 0x13e4}], 0x1, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x110}, 0x4001) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000001000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}}, 0x1c}}, 0x0) 23:52:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000000000a0002801c0001"], 0x64}}, 0x0) 23:52:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000004c200002801c0001"], 0x64}}, 0x0) 23:52:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000fb1) 23:52:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000002000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00020000200002801c0001"], 0x64}}, 0x0) 23:52:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}}, 0x1c}}, 0x0) 23:52:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000258200002801c0001"], 0x64}}, 0x0) 23:52:40 executing program 4: r0 = socket(0x9, 0x1, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) 23:52:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000060200002801c0001"], 0x64}}, 0x0) 23:52:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001, 0x3}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x101, 0x7f83, 0x80}}) 23:52:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000003000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00030000200002801c0001"], 0x64}}, 0x0) 23:52:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}}, 0x1c}}, 0x0) 23:52:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00005865200002801c0001"], 0x64}}, 0x0) 23:52:41 executing program 4: r0 = socket(0x9, 0x1, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) 23:52:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00040000200002801c0001"], 0x64}}, 0x0) 23:52:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000068200002801c0001"], 0x64}}, 0x0) 23:52:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000004000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}}, 0x1c}}, 0x0) 23:52:42 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001, 0x3}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x101, 0x7f83, 0x80}}) 23:52:42 executing program 4: r0 = socket(0x9, 0x1, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) socket(0x9, 0x1, 0x6) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000000005) (async) 23:52:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00050000200002801c0001"], 0x64}}, 0x0) 23:52:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000006000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 789.095743] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 23:52:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x64, r2}, @void}}}, 0x1c}}, 0x0) 23:52:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x990001, 0x3}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x101, 0x7f83, 0x80}}) 23:52:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000006c200002801c0001"], 0x64}}, 0x0) [ 789.379243] nla_parse: 13 callbacks suppressed [ 789.379254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 789.626560] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00060000200002801c0001"], 0x64}}, 0x0) [ 789.733009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:43 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x1, 0x0, 0x6}}, 0x14) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x240a40, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x7, 0xffff0001, 0x8}) sendfile(r0, r1, 0x0, 0x8000) 23:52:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000007000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x10d, r2}, @void}}}, 0x1c}}, 0x0) 23:52:43 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0xe84e, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990968, 0x5, '\x00', @value64=0x40}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x73, 0xb, 0x4, 0x400, 0x1, {r2, r3/1000+10000}, {0x4, 0x2, 0x0, 0x40, 0x2c, 0x1, "4ba92512"}, 0x6, 0x1, {&(0x7f0000000180)=[{0xffffff7f, 0x5, {0x9}, 0x2}, {0x2a85, 0x7, {0x3}, 0x7c00}]}, 0x7fffffff}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x1b, 0x40, 0x80000001, 0x2, 0x4, 0x0, 0x0, 0xffffffffffffff81}, &(0x7f00000002c0)={0x7fffffff, 0x1, 0x4b5a, 0x200, 0x8, 0x0, 0xc}, &(0x7f0000000300)={0x3, 0x30de, 0x100000000, 0x5, 0x0, 0x8, 0xfff, 0x5}, &(0x7f0000000380)={r4, r5+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x384]}, 0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000074200002801c0001"], 0x64}}, 0x0) [ 790.036260] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:43 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x1, 0x0, 0x6}}, 0x14) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x240a40, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x7, 0xffff0001, 0x8}) sendfile(r0, r1, 0x0, 0x8000) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x1, 0x0, 0x6}}, 0x14) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x240a40, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x7, 0xffff0001, 0x8}) (async) sendfile(r0, r1, 0x0, 0x8000) (async) 23:52:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00070000200002801c0001"], 0x64}}, 0x0) [ 790.104218] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x4801, r2}, @void}}}, 0x1c}}, 0x0) [ 790.182171] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000008000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0xe84e, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990968, 0x5, '\x00', @value64=0x40}}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x73, 0xb, 0x4, 0x400, 0x1, {r2, r3/1000+10000}, {0x4, 0x2, 0x0, 0x40, 0x2c, 0x1, "4ba92512"}, 0x6, 0x1, {&(0x7f0000000180)=[{0xffffff7f, 0x5, {0x9}, 0x2}, {0x2a85, 0x7, {0x3}, 0x7c00}]}, 0x7fffffff}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x1b, 0x40, 0x80000001, 0x2, 0x4, 0x0, 0x0, 0xffffffffffffff81}, &(0x7f00000002c0)={0x7fffffff, 0x1, 0x4b5a, 0x200, 0x8, 0x0, 0xc}, &(0x7f0000000300)={0x3, 0x30de, 0x100000000, 0x5, 0x0, 0x8, 0xfff, 0x5}, &(0x7f0000000380)={r4, r5+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x384]}, 0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000007a200002801c0001"], 0x64}}, 0x0) [ 790.299665] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xf}}, 0x0) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00080000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x1, 0x0, 0x6}}, 0x14) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x240a40, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x7, 0xffff0001, 0x8}) sendfile(r0, r1, 0x0, 0x8000) [ 790.398080] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030000000a000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0xe84e, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990968, 0x5, '\x00', @value64=0x40}}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x73, 0xb, 0x4, 0x400, 0x1, {r2, r3/1000+10000}, {0x4, 0x2, 0x0, 0x40, 0x2c, 0x1, "4ba92512"}, 0x6, 0x1, {&(0x7f0000000180)=[{0xffffff7f, 0x5, {0x9}, 0x2}, {0x2a85, 0x7, {0x3}, 0x7c00}]}, 0x7fffffff}) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x1b, 0x40, 0x80000001, 0x2, 0x4, 0x0, 0x0, 0xffffffffffffff81}, &(0x7f00000002c0)={0x7fffffff, 0x1, 0x4b5a, 0x200, 0x8, 0x0, 0xc}, &(0x7f0000000300)={0x3, 0x30de, 0x100000000, 0x5, 0x0, 0x8, 0xfff, 0x5}, &(0x7f0000000380)={r4, r5+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x384]}, 0x8}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) [ 790.481381] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x14}}, 0x0) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000081200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40001) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x48a}}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) [ 790.531839] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00090000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x64}}, 0x0) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030000000c000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x6}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x1, 0x7fff, 0x3}) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dffffa888200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40001) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x48a}}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x48a}}, './file0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) sendfile(r0, r2, 0x0, 0x20000000005) (async) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000a0000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xc0}}, 0x0) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030000000e000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dffffff9e200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x6}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x1, 0x7fff, 0x3}) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030000000f000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40001) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x48a}}, './file0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000b0000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xec0}}, 0x0) 23:52:44 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x0, 0x6}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x1, 0x7fff, 0x3}) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000002f0200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000010000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000c0000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffffff0200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x33fe0}}, 0x0) 23:52:44 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) 23:52:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x300201, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9b0000, 0x7fd, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990afd, 0x4, '\x00', @p_u8=&(0x7f00000000c0)}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000060000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000e0000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfffffffc200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x2000009c}}, 0x0) 23:52:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x300201, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9b0000, 0x7fd, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990afd, 0x4, '\x00', @p_u8=&(0x7f00000000c0)}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000f0000200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300005865000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d88a8ffff200002801c0001"], 0x64}}, 0x0) 23:52:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x300201, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x9b0000, 0x7fd, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990afd, 0x4, '\x00', @p_u8=&(0x7f00000000c0)}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x7ffff000}}, 0x0) 23:52:45 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0x20000000005) (async) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00100000200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000081000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f0ffff200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x6, {0xcb54, @usage=0x5c1, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x8, 0x0, @usage=0x2, 0x548, 0x1ff, [0x6, 0x3, 0x240000000000, 0x2, 0x4, 0x8]}, {0x4, @struct={0x4, 0x55b6}, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x5, 0x241, @struct={0xff, 0x4}, 0x6e89, 0x2, [0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x9, 0x3]}, {0x0, @usage, r2, 0x4, 0x3, 0x0, 0xffffffff00000000, 0x9, 0x4c, @usage=0x1ff, 0x4, 0x1, [0x2000000000000000, 0xfffffffffffffffe, 0x5, 0x1e28, 0xf724, 0x8000000000000000]}, {0x7fffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={r2, 0x9}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x7010c2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001280)={0x10, 0x1, {0x5, @usage=0x1, r4, 0x7, 0x80000001, 0x4e, 0x9925, 0x1, 0x0, @struct={0xff, 0x7}, 0x1, 0x69e5, [0x2cb, 0x7fff, 0x1, 0x6, 0x4, 0x3000000000000000]}, {0xfffffffffffffffc, @usage=0x20, r1, 0x7, 0xffffffffffffffff, 0x3, 0x24000000, 0x800, 0x58, @usage=0xfffffffffffffff9, 0x9, 0x9, [0xfff, 0x0, 0x9, 0x5, 0xfffffffffffffffd, 0x9b]}, {0x9, @usage=0x4, r2, 0x1f, 0x3f, 0xff4a, 0xd04, 0xffffffffffffffff, 0x1d9, @struct={0x400, 0x6}, 0x1, 0xffff, [0xff, 0x2, 0x2, 0xf, 0xa68, 0x41]}, {0x4, 0xcd, 0x4}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xfffffdef}}, 0x0) 23:52:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d7fffffff200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00480000200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x2}, 0x0) 23:52:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000a85000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x6, {0xcb54, @usage=0x5c1, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x8, 0x0, @usage=0x2, 0x548, 0x1ff, [0x6, 0x3, 0x240000000000, 0x2, 0x4, 0x8]}, {0x4, @struct={0x4, 0x55b6}, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x5, 0x241, @struct={0xff, 0x4}, 0x6e89, 0x2, [0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x9, 0x3]}, {0x0, @usage, r2, 0x4, 0x3, 0x0, 0xffffffff00000000, 0x9, 0x4c, @usage=0x1ff, 0x4, 0x1, [0x2000000000000000, 0xfffffffffffffffe, 0x5, 0x1e28, 0xf724, 0x8000000000000000]}, {0x7fffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={r2, 0x9}) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x7010c2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001280)={0x10, 0x1, {0x5, @usage=0x1, r4, 0x7, 0x80000001, 0x4e, 0x9925, 0x1, 0x0, @struct={0xff, 0x7}, 0x1, 0x69e5, [0x2cb, 0x7fff, 0x1, 0x6, 0x4, 0x3000000000000000]}, {0xfffffffffffffffc, @usage=0x20, r1, 0x7, 0xffffffffffffffff, 0x3, 0x24000000, 0x800, 0x58, @usage=0xfffffffffffffff9, 0x9, 0x9, [0xfff, 0x0, 0x9, 0x5, 0xfffffffffffffffd, 0x9b]}, {0x9, @usage=0x4, r2, 0x1f, 0x3f, 0xff4a, 0xd04, 0xffffffffffffffff, 0x1d9, @struct={0x400, 0x6}, 0x1, 0xffff, [0xff, 0x2, 0x2, 0xf, 0xa68, 0x41]}, {0x4, 0xcd, 0x4}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d004c0000200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) 23:52:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x7}, 0x0) 23:52:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d9effffff200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103ffffa888000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00600000200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x6, {0xcb54, @usage=0x5c1, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x8, 0x0, @usage=0x2, 0x548, 0x1ff, [0x6, 0x3, 0x240000000000, 0x2, 0x4, 0x8]}, {0x4, @struct={0x4, 0x55b6}, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x5, 0x241, @struct={0xff, 0x4}, 0x6e89, 0x2, [0x7fffffffffffffff, 0x40, 0x8, 0x4, 0x9, 0x3]}, {0x0, @usage, r2, 0x4, 0x3, 0x0, 0xffffffff00000000, 0x9, 0x4c, @usage=0x1ff, 0x4, 0x1, [0x2000000000000000, 0xfffffffffffffffe, 0x5, 0x1e28, 0xf724, 0x8000000000000000]}, {0x7fffffffffffffff}}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={r2, 0x9}) (async) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480), 0x7010c2, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001280)={0x10, 0x1, {0x5, @usage=0x1, r4, 0x7, 0x80000001, 0x4e, 0x9925, 0x1, 0x0, @struct={0xff, 0x7}, 0x1, 0x69e5, [0x2cb, 0x7fff, 0x1, 0x6, 0x4, 0x3000000000000000]}, {0xfffffffffffffffc, @usage=0x20, r1, 0x7, 0xffffffffffffffff, 0x3, 0x24000000, 0x800, 0x58, @usage=0xfffffffffffffff9, 0x9, 0x9, [0xfff, 0x0, 0x9, 0x5, 0xfffffffffffffffd, 0x9b]}, {0x9, @usage=0x4, r2, 0x1f, 0x3f, 0xff4a, 0xd04, 0xffffffffffffffff, 0x1d9, @struct={0x400, 0x6}, 0x1, 0xffff, [0xff, 0x2, 0x2, 0xf, 0xa68, 0x41]}, {0x4, 0xcd, 0x4}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756df0ffffff200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00680000200002801c0001"], 0x64}}, 0x0) 23:52:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103ffffff9e000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x8}, 0x0) 23:52:45 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x4, @stop_pts=0x100}) 23:52:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d006c0000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103fffffff0000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756dfcffffff200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x64}, 0x0) 23:52:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x4, @stop_pts=0x100}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x4, @stop_pts=0x100}) (async) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00740000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d007a0000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000010002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x4, @stop_pts=0x100}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x0, 0x4, @stop_pts=0x100}) (async) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103fffffffc000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x300}, 0x0) 23:52:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000030002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010388a8ffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0xffffff1f}, 0x0) 23:52:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000000000a0002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d005e0200200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300f0ffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x2}, 0x0) 23:52:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000005) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00020000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00030000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00200200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001037fffffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0x3}, 0x1c) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x80, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) sendto$inet6(r1, &(0x7f0000000040)="992ba0f0bfed47362169cb5e126a9ea0d4368a2f4e2284e8c275668939a07147299b08de6846d0a5370e28c8858e594bfb9b8e90dbb505a9ef4f4518875d3e258c9c29361358d3d032486ce2d7b5292c0c80f78e180cc7c7a8a02a0e", 0x5c, 0x4004044, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @mcast2, 0x85}, 0x1c) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x100, [0x2, 0xfda, 0xfffffffffffff801, 0x8, 0xfff]}) sendfile(r0, r3, 0x0, 0x20000000005) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3}, 0x0) 23:52:46 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) (async) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00040000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000300200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001039effffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x4}, 0x0) 23:52:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000500200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00050000200002801c0001"], 0x64}}, 0x0) 23:52:46 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f00000001c0)=0x3, 0x4) fcntl$setlease(r1, 0x400, 0x2) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xab0404}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYBLOB="0c00990054950000680000000800ef00020000000500ee00070000000500ee00090000000800ef000c0000000800ef00060000000500ee00c40000000800ef00000000000500ee009d000000"], 0x68}, 0x1, 0x0, 0x0, 0x8851}, 0x4000001) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x10000}) 23:52:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103f0ffffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x8}, 0x0) 23:52:47 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f00000001c0)=0x3, 0x4) fcntl$setlease(r1, 0x400, 0x2) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xab0404}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYBLOB="0c00990054950000680000000800ef00020000000500ee00070000000500ee00090000000800ef000c0000000800ef00060000000500ee00c40000000800ef00000000000500ee009d000000"], 0x68}, 0x1, 0x0, 0x0, 0x8851}, 0x4000001) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x10000}) 23:52:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00060000200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000600200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xe}, 0x0) 23:52:47 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0x3}, 0x1c) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x80, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) sendto$inet6(r1, &(0x7f0000000040)="992ba0f0bfed47362169cb5e126a9ea0d4368a2f4e2284e8c275668939a07147299b08de6846d0a5370e28c8858e594bfb9b8e90dbb505a9ef4f4518875d3e258c9c29361358d3d032486ce2d7b5292c0c80f78e180cc7c7a8a02a0e", 0x5c, 0x4004044, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @mcast2, 0x85}, 0x1c) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000001c0)) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x100, [0x2, 0xfda, 0xfffffffffffff801, 0x8, 0xfff]}) (async) sendfile(r0, r3, 0x0, 0x20000000005) 23:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103fcffffff000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300020000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf}, 0x0) 23:52:47 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x2) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f00000001c0)=0x3, 0x4) (async) fcntl$setlease(r1, 0x400, 0x2) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xab0404}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYBLOB="0c00990054950000680000000800ef00020000000500ee00070000000500ee00090000000800ef000c0000000800ef00060000000500ee00c40000000800ef00000000000500ee009d000000"], 0x68}, 0x1, 0x0, 0x0, 0x8851}, 0x4000001) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x10000}) 23:52:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00070000200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000700200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300030000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x60}, 0x0) 23:52:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990003}) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000900200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00080000200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990003}) 23:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300040000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:47 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0x3}, 0x1c) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x80, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) sendto$inet6(r1, &(0x7f0000000040)="992ba0f0bfed47362169cb5e126a9ea0d4368a2f4e2284e8c275668939a07147299b08de6846d0a5370e28c8858e594bfb9b8e90dbb505a9ef4f4518875d3e258c9c29361358d3d032486ce2d7b5292c0c80f78e180cc7c7a8a02a0e", 0x5c, 0x4004044, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @mcast2, 0x85}, 0x1c) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x100, [0x2, 0xfda, 0xfffffffffffff801, 0x8, 0xfff]}) sendfile(r0, r3, 0x0, 0x20000000005) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @loopback, 0x3}, 0x1c) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x80, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) sendto$inet6(r1, &(0x7f0000000040)="992ba0f0bfed47362169cb5e126a9ea0d4368a2f4e2284e8c275668939a07147299b08de6846d0a5370e28c8858e594bfb9b8e90dbb505a9ef4f4518875d3e258c9c29361358d3d032486ce2d7b5292c0c80f78e180cc7c7a8a02a0e", 0x5c, 0x4004044, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @mcast2, 0x85}, 0x1c) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000001c0)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000140)={0x0, 0x100, [0x2, 0xfda, 0xfffffffffffff801, 0x8, 0xfff]}) (async) sendfile(r0, r3, 0x0, 0x20000000005) (async) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000a00200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00090000200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0}, 0x0) 23:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x300}, 0x0) 23:52:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990003}) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000b00200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300060000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000a0000200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000c00200002801c0001"], 0x64}}, 0x0) 23:52:47 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snd_pcm', 0x624440, 0x10) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x8, 0xffffff7f, r0, 0x0, &(0x7f00000000c0)={0x9909e2, 0x3, '\x00', @value64}}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1011}) 23:52:48 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x80000000}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x5}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f00000001c0)=""/4096}, {0x2000, 0xba, &(0x7f00000011c0)=""/186}, {0x100000, 0x95, &(0x7f0000001280)=""/149}]}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0xff, &(0x7f0000000040)=0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000005) 23:52:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xe00}, 0x0) 23:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000b0000200002801c0001"], 0x64}}, 0x0) 23:52:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000e00200002801c0001"], 0x64}}, 0x0) 23:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300070000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:48 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snd_pcm', 0x624440, 0x10) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)) (async, rerun: 32) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x8, 0xffffff7f, r0, 0x0, &(0x7f00000000c0)={0x9909e2, 0x3, '\x00', @value64}}) (async, rerun: 32) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1011}) [ 794.452519] nla_parse: 72 callbacks suppressed [ 794.452530] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 794.491588] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 23:52:48 executing program 0: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snd_pcm', 0x624440, 0x10) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x8, 0xffffff7f, r0, 0x0, &(0x7f00000000c0)={0x9909e2, 0x3, '\x00', @value64}}) (async) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x1011}) 23:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000c0000200002801c0001"], 0x64}}, 0x0) 23:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300080000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000f00200002801c0001"], 0x64}}, 0x0) [ 794.504715] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xeac}, 0x0) [ 794.578513] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000e0000200002801c0001"], 0x64}}, 0x0) [ 794.642428] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 794.681982] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.723908] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:48 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x80000000}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x5}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f00000001c0)=""/4096}, {0x2000, 0xba, &(0x7f00000011c0)=""/186}, {0x100000, 0x95, &(0x7f0000001280)=""/149}]}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0xff, &(0x7f0000000040)=0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000005) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x80000000}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x5}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f00000001c0)=""/4096}, {0x2000, 0xba, &(0x7f00000011c0)=""/186}, {0x100000, 0x95, &(0x7f0000001280)=""/149}]}) (async) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0xff, &(0x7f0000000040)=0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000000005) (async) 23:52:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00002000200002801c0001"], 0x64}}, 0x0) 23:52:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x1, 0x990001}) 23:52:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xec0}, 0x0) 23:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000a0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000f0000200002801c0001"], 0x64}}, 0x0) [ 795.026632] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.052268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000c0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf00}, 0x0) 23:52:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00004800200002801c0001"], 0x64}}, 0x0) [ 795.071885] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x1, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x1, 0x990001}) (async) 23:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00100000200002801c0001"], 0x64}}, 0x0) 23:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000e0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:49 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x80000000}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x5}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f00000001c0)=""/4096}, {0x2000, 0xba, &(0x7f00000011c0)=""/186}, {0x100000, 0x95, &(0x7f0000001280)=""/149}]}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0xff, &(0x7f0000000040)=0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000005) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x80000000}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x5}) (async) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x2000, 0x1000, &(0x7f00000001c0)=""/4096}, {0x2000, 0xba, &(0x7f00000011c0)=""/186}, {0x100000, 0x95, &(0x7f0000001280)=""/149}]}) (async) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0xff, &(0x7f0000000040)=0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x20000000005) (async) 23:52:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6000}, 0x0) 23:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00004c00200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x1, 0x990001}) 23:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00480000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000f0000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d004c0000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00655800200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300100000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x8, @pix_mp={0x7f86, 0x7, 0x494e4f4b, 0x4, 0x8, [{0x5, 0x3}, {0x7f}, {0x8}, {0x1000, 0x1}, {0x400, 0xb2d}, {0xffffffff, 0x714d}, {0xfffff001, 0xffff}, {0x6, 0x921}], 0x40, 0x1, 0x1, 0x2, 0x6}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xac0e}, 0x0) 23:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00600000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xc00e}, 0x0) 23:52:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300600000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00025e00200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x8, @pix_mp={0x7f86, 0x7, 0x494e4f4b, 0x4, 0x8, [{0x5, 0x3}, {0x7f}, {0x8}, {0x1000, 0x1}, {0x400, 0xb2d}, {0xffffffff, 0x714d}, {0xfffff001, 0xffff}, {0x6, 0x921}], 0x40, 0x1, 0x1, 0x2, 0x6}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00680000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00006000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300f00000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:49 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x8, @pix_mp={0x7f86, 0x7, 0x494e4f4b, 0x4, 0x8, [{0x5, 0x3}, {0x7f}, {0x8}, {0x1000, 0x1}, {0x400, 0xb2d}, {0xffffffff, 0x714d}, {0xfffff001, 0xffff}, {0x6, 0x921}], 0x40, 0x1, 0x1, 0x2, 0x6}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x8, @pix_mp={0x7f86, 0x7, 0x494e4f4b, 0x4, 0x8, [{0x5, 0x3}, {0x7f}, {0x8}, {0x1000, 0x1}, {0x400, 0xb2d}, {0xffffffff, 0x714d}, {0xfffff001, 0xffff}, {0x6, 0x921}], 0x40, 0x1, 0x1, 0x2, 0x6}}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) 23:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d006c0000200002801c0001"], 0x64}}, 0x0) 23:52:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf000}, 0x0) 23:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00586500200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000300000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x34000}, 0x0) 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001, 0x7fff}, 0x40000, 0x40, 0x24a151e7, 0x0, 0x0, 0x40, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0x6, 0x4000000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='\x00') mbind(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x3, 0x9, 0x5, 0x1, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x38, 0x4, @perf_config_ext={0x2de, 0xffe}, 0x8ac, 0x1, 0x7f9, 0x9, 0x5, 0x1, 0x8, 0x0, 0x1, 0x0, 0x80000000}) remap_file_pages(&(0x7f00001ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00740000200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00006800200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000600000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x400300}, 0x0) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00006c00200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d007a0000200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000700000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 796.476940] mmap: syz-executor.0 (20638) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001, 0x7fff}, 0x40000, 0x40, 0x24a151e7, 0x0, 0x0, 0x40, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0x6, 0x4000000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='\x00') mbind(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x3, 0x9, 0x5, 0x1, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x38, 0x4, @perf_config_ext={0x2de, 0xffe}, 0x8ac, 0x1, 0x7f9, 0x9, 0x5, 0x1, 0x8, 0x0, 0x1, 0x0, 0x80000000}) remap_file_pages(&(0x7f00001ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001, 0x7fff}, 0x40000, 0x40, 0x24a151e7, 0x0, 0x0, 0x40, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x4) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0x6, 0x4000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='\x00') (async) mbind(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x3, 0x9, 0x5, 0x1, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x38, 0x4, @perf_config_ext={0x2de, 0xffe}, 0x8ac, 0x1, 0x7f9, 0x9, 0x5, 0x1, 0x8, 0x0, 0x1, 0x0, 0x80000000}) (async) remap_file_pages(&(0x7f00001ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) (async) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00007400200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000a00000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00000200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x1000000}, 0x0) 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001, 0x7fff}, 0x40000, 0x40, 0x24a151e7, 0x0, 0x0, 0x40, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfef0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0x6, 0x4000000) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='\x00') (async) mbind(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x3, 0x9, 0x5, 0x1, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x38, 0x4, @perf_config_ext={0x2de, 0xffe}, 0x8ac, 0x1, 0x7f9, 0x9, 0x5, 0x1, 0x8, 0x0, 0x1, 0x0, 0x80000000}) (async) remap_file_pages(&(0x7f00001ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x990001}) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00580200200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00007a00200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300850a00000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x2000000}, 0x0) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00008100200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x8, 0x5}) 23:52:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x7ff, 0x7fff, 0x5c0, 0xcf5, 0xbd, "e2f097ab6029fc00f15f39cbce318f814074bb", 0x6, 0x7}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) futimesat(r6, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={{}, {0x77359400}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff1f) sendfile(r7, r3, 0x0, 0xfffffffffffffff1) write$binfmt_elf64(r6, &(0x7f0000000700)=ANY=[], 0x1001) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r8, r9], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r8, r10, 0x3, 0x1, 0x2}) fcntl$setlease(r3, 0x400, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x100000000, 0x1, 0x9ac, 0xfff}) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00f00200200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000c00000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x3000000}, 0x0) 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x8, 0x5}) 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0000f000200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000300200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000e00000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x4000000}, 0x0) [ 797.131991] audit: type=1800 audit(1674604370.886:3269): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15635 res=0 23:52:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d0002f000200002801c0001"], 0x64}}, 0x0) 23:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x8, 0x5}) 23:52:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300000f00000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x2) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x7ff, 0x7fff, 0x5c0, 0xcf5, 0xbd, "e2f097ab6029fc00f15f39cbce318f814074bb", 0x6, 0x7}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) futimesat(r6, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={{}, {0x77359400}}) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff1f) sendfile(r7, r3, 0x0, 0xfffffffffffffff1) write$binfmt_elf64(r6, &(0x7f0000000700)=ANY=[], 0x1001) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r8, r9], 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r8, r10, 0x3, 0x1, 0x2}) (async) fcntl$setlease(r3, 0x400, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x100000000, 0x1, 0x9ac, 0xfff}) 23:52:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000500200002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x8000000}, 0x0) 23:52:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300655800000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000250002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0xbf6, 0x3}) 23:52:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000600200002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d000000003c0002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0xbf6, 0x3}) 23:52:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300006000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xe000000}, 0x0) [ 797.678836] audit: type=1800 audit(1674604371.436:3270): pid=20755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14818 res=0 23:52:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000000600002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x7ff, 0x7fff, 0x5c0, 0xcf5, 0xbd, "e2f097ab6029fc00f15f39cbce318f814074bb", 0x6, 0x7}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000000005) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) futimesat(r6, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={{}, {0x77359400}}) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff1f) sendfile(r7, r3, 0x0, 0xfffffffffffffff1) (async) write$binfmt_elf64(r6, &(0x7f0000000700)=ANY=[], 0x1001) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000100)=[r8, r9], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r8, r10, 0x3, 0x1, 0x2}) (async) fcntl$setlease(r3, 0x400, 0x2) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x100000000, 0x1, 0x9ac, 0xfff}) 23:52:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0xbf6, 0x3}) 23:52:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300586500000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000700200002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf000000}, 0x0) 23:52:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000200200002801c0001"], 0x64}}, 0x0) 23:52:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x60000000}, 0x0) 23:52:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x990001}) 23:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000900200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300008100000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) [ 798.223600] audit: type=1800 audit(1674604371.976:3271): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14818 res=0 23:52:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000300200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x9effffff}, 0x0) 23:52:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000031000103000a8500000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x990001}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x990001}) (async) 23:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000a00200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000400200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x80841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x1}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000140), &(0x7f00000001c0)={'L+'}, 0x16, 0x2) r6 = accept4$x25(r2, 0x0, &(0x7f0000000080), 0x800) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x20000000005) 23:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xac0e0000}, 0x0) 23:52:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000310001030000f000000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000500200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xc00e0000}, 0x0) 23:52:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x990001}) 23:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000b00200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003100010300fffff0000c000000000000500001004c000100090001006373756d"], 0x64}}, 0x0) 23:52:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000600200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x8000000, 0x4, 0x1}) 23:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000003000010300000000000c000000000000500001004c000100090001006373756d00000c00200002801c0001"], 0x64}}, 0x0) 23:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xb05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 799.135574] [ 799.137194] ============================================ [ 799.142632] WARNING: possible recursive locking detected [ 799.148059] 4.19.211-syzkaller #0 Not tainted [ 799.152528] -------------------------------------------- [ 799.157967] swapper/1/0 is trying to acquire lock: [ 799.162890] 00000000c8a0717b (&port_lock_key){-.-.}, at: uart_write+0x1ce/0x6f0 [ 799.170324] [ 799.170324] but task is already holding lock: [ 799.176274] 00000000c8a0717b (&port_lock_key){-.-.}, at: serial8250_handle_irq.part.0+0x21/0x3d0 [ 799.185239] [ 799.185239] other info that might help us debug this: [ 799.191886] Possible unsafe locking scenario: [ 799.191886] [ 799.197919] CPU0 [ 799.200476] ---- [ 799.203029] lock(&port_lock_key); [ 799.206668] lock(&port_lock_key); [ 799.210279] [ 799.210279] *** DEADLOCK *** [ 799.210279] [ 799.216314] May be due to missing lock nesting notation [ 799.216314] [ 799.223218] 3 locks held by swapper/1/0: [ 799.227259] #0: 0000000026cd6ed2 (&(&i->lock)->rlock){-.-.}, at: serial8250_interrupt+0x3a/0x240 [ 799.236273] #1: 00000000c8a0717b (&port_lock_key){-.-.}, at: serial8250_handle_irq.part.0+0x21/0x3d0 [ 799.245645] #2: 00000000ab09c1b6 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref+0x1d/0x80 [ 799.253711] [ 799.253711] stack backtrace: [ 799.258199] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.211-syzkaller #0 [ 799.265281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 799.274624] Call Trace: [ 799.277194] [ 799.279328] dump_stack+0x1fc/0x2ef [ 799.282938] __lock_acquire.cold+0x121/0x57e [ 799.287356] ? mark_held_locks+0xf0/0xf0 [ 799.291409] ? check_preemption_disabled+0x41/0x280 [ 799.296405] ? perf_trace_lock_acquire+0x530/0x530 [ 799.301313] ? perf_trace_lock+0xe2/0x4b0 [ 799.305454] ? check_preemption_disabled+0x41/0x280 [ 799.310461] lock_acquire+0x170/0x3c0 [ 799.314241] ? uart_write+0x1ce/0x6f0 [ 799.318033] _raw_spin_lock_irqsave+0x8c/0xc0 [ 799.322521] ? uart_write+0x1ce/0x6f0 [ 799.326307] uart_write+0x1ce/0x6f0 [ 799.329926] ? lock_downgrade+0x720/0x720 [ 799.334052] ? lock_acquire+0x170/0x3c0 [ 799.338010] ? __uart_start.isra.0+0x1c0/0x1c0 [ 799.342573] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 799.347664] ? n_hdlc_buf_get+0x1ab/0x240 [ 799.351795] ? __uart_start.isra.0+0x1c0/0x1c0 [ 799.356358] n_hdlc_send_frames+0x278/0x470 [ 799.360666] n_hdlc_tty_wakeup+0xa0/0xc0 [ 799.364717] ? n_hdlc_tty_open+0x510/0x510 [ 799.368951] tty_wakeup+0xd4/0x110 [ 799.372484] tty_port_default_wakeup+0x26/0x40 [ 799.377078] serial8250_tx_chars+0x490/0xaf0 [ 799.381470] serial8250_handle_irq.part.0+0x31f/0x3d0 [ 799.386657] serial8250_default_handle_irq+0xae/0x220 [ 799.391857] serial8250_interrupt+0x101/0x240 [ 799.396353] ? serial8250_backup_timeout+0x4d0/0x4d0 [ 799.401446] __handle_irq_event_percpu+0x27e/0x8e0 [ 799.406370] handle_irq_event+0x102/0x290 [ 799.410513] ? handle_irq_event_percpu+0x160/0x160 [ 799.415434] ? handle_edge_irq+0x29/0xcf0 [ 799.419563] handle_edge_irq+0x260/0xcf0 [ 799.423637] handle_irq+0x35/0x50 [ 799.427087] do_IRQ+0x93/0x1c0 [ 799.430272] common_interrupt+0xf/0xf [ 799.434047] [ 799.436266] RIP: 0010:native_safe_halt+0xe/0x10 [ 799.440913] Code: 48 89 df e8 f4 20 7f f9 e9 2e ff ff ff 48 89 df e8 e7 20 7f f9 eb 82 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 14 43 4e 00 fb f4 90 e9 07 00 00 00 0f 00 2d 04 43 4e 00 f4 c3 90 90 41 56 41 55 [ 799.459797] RSP: 0018:ffff8880b5a9fd40 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd2 [ 799.467494] RAX: 1ffffffff13e3054 RBX: dffffc0000000000 RCX: 0000000000000000 [ 799.474776] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880b5a86c44 [ 799.482046] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 799.489296] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89f18290 [ 799.496553] R13: 1ffff11016b53fb2 R14: 0000000000000000 R15: 0000000000000000 [ 799.503814] default_idle+0x49/0x310 [ 799.507514] do_idle+0x2ec/0x4b0 [ 799.510868] ? arch_cpu_idle_exit+0x70/0x70 [ 799.515169] ? finish_task_switch+0x531/0x760 [ 799.519659] cpu_startup_entry+0xc5/0xe0 [ 799.523710] ? cpu_in_idle+0x20/0x20 [ 799.527421] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 799.532511] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 799.537072] start_secondary+0x435/0x5c0 [ 799.541119] ? set_cpu_sibling_map+0x17b0/0x17b0 [ 799.545870] secondary_startup_64+0xa4/0xb0